Disabling Virus Scanning

Sametime includes a deployment of ClamAV for scanning and quarantining files that are uploaded to the Sametime Files service. It may be desirable to disable virus scanning if you already have some kind of file system scanner on the client and/or server which could lead to double-scanning inefficiencies.

Kubernetes

To disable virus scanning:

Deploy the helm chart with the setting --set global.disableVirusScanning=true as an option on the helm install/upgrade command, or applied in a custom.yaml like:

global:
  disableVirusScanning: true

Docker

To disable virus scanning:

Open the file docker-compose.yml and find the following section:

# UNCOMMENT THE FOLLOWING LINE TO DISABLE VIRUS SCANNING
#            - FILES_UPLOAD_PATH=/data/files
# COMMENT THE FOLLOWING TWO LINES TO DISABLE VIRUS SCANNING
            - FILES_UPLOAD_PATH=/data/uploads
            - FILES_QUARANTINE_PATH=/data/quarantine

Follow the instructions about commenting and uncomming these config settings so that the section now looks like:

# UNCOMMENT THE FOLLOWING LINE TO DISABLE VIRUS SCANNING
            - FILES_UPLOAD_PATH=/data/files
# COMMENT THE FOLLOWING TWO LINES TO DISABLE VIRUS SCANNING
#            - FILES_UPLOAD_PATH=/data/uploads
#            - FILES_QUARANTINE_PATH=/data/quarantine

The comments are enough to stop using the included clamav service, but if you also want that service to not run, find the service in the docker-compose.yml and add a profile option to it like:

    clamav:
        image: hclcr.io/st/sametime-clamav:${BUILD_LEVEL}
        profiles:
            - donotstart

Windows

To disable virus scanning:

Comment out the CLAMDSCAN_PATH setting in the file <INSTALLATION_DIRECTORY>\node\files\env and restart the ST Files service:

PORT=8010
LOG_FILE_PREFIX=stfiles
FILES_UPLOAD_PATH=C:\Sametime\Data\node\files
FILES_DOWNLOAD_PATH=C:\Sametime\Data\node\files
FILES_TEMP_PATH=C:\Sametime\Data\node\files\tmp
FILES_QUARANTINE_PATH=
FILES_ARE_PERMISSIVE=true
#CLAMDSCAN_PATH=C:\Sametime\clamav-win-x64\clamdscan.exe

NOTE: There is a env file and a .env file. Make sure you are changing the env file.

That is enough to stop using the included clamd service, but if you also want that service to not run, you can also comment out the references to clamd and freshclam in the file <INSTALLATION_DIRECTORY>\STCommLaunch.dep:

#SERVERAPP freshclam,ST Community,SOFT
#SERVERAPP clamd,ST Community,SOFT

Parent Topic: Configuring