@@ -176,12 +176,12 @@ scan_export_filelist="$scan_export_filelist"
176176##
177177# The default quarantine action for malware hits
178178# [0 = alert only, 1 = move to quarantine & alert]
179- quarantine_hits="1 "
179+ quarantine_hits="$quarantine_hits "
180180
181181# Try to clean string based malware injections
182182# [NOTE: quarantine_hits=1 required]
183183# [0 = disabled, 1 = clean]
184- quarantine_clean="1 "
184+ quarantine_clean="$quarantine_clean "
185185
186186# The default suspend action for users wih hits
187187# Cpanel suspend or set shell /bin/false on non-Cpanel
@@ -196,6 +196,12 @@ quarantine_suspend_user_minuid="$quarantine_suspend_user_minuid"
196196##
197197# [ MONITORING OPTIONS ]
198198##
199+ # The default startup option for monitor mode, either 'users' or path to line
200+ # spaced file containing local paths to monitor. This option is used for the
201+ # init based startup script. This value is ignored when '/etc/sysconfig/maldet'
202+ # or '/etc/default/maldet' is present with a defined value for $MONITOR_MODE.
203+ default_monitor_mode="$default_monitor_mode"
204+
199205# The base number of files that can be watched under a path
200206# [ maximum file watches = inotify_base_watches*users ]
201207inotify_base_watches="16384"
@@ -210,7 +216,7 @@ inotify_reloadtime="3600"
210216
211217# The minimum userid that will be added to path monitoring when
212218# the USERS option is specified
213- inotify_minuid="500 "
219+ inotify_minuid="$inotify_minuid "
214220
215221# This is the html/web root for users relative to homedir, when
216222# this option is set, users will only have the webdir monitored
@@ -232,6 +238,10 @@ inotify_ionice="$inotify_ionice"
232238# values from 0 - 800, a 12 cores system would accept 0 - 1200 etc...
233239inotify_cpulimit="$inotify_cpulimit"
234240
241+ # Log every file scanned by inotify monitoring mode; this is not recommended
242+ # and will drown out your 'event_log' file, intended only for debugging purposes.
243+ inotify_verbose="0"
244+
235245##
236246# [ STATISTICAL ANALYSIS ]
237247# This is a beta feature and as such should be used with caution.
0 commit comments