ClamAV Milter + CentOS 7

Posted on by Andy

Sometimes i'm asking myself who the fuck is releasing some totally bugged packages… After several trials here what you need to do to get the EPEL clamav to run on CentOS 7: 

yum install clamav-milter-systemd clamav-scanner-systemd clamav-update
cp /etc/clam.d/scan.conf /etc/clamd.d/clamd.conf

edit /etc/clamd.d/clamd.conf 

LogSyslog yes
DatabaseDirectory /var/lib/clamav
TCPSocket 3310
TCPAddr 127.0.0.1
User clamscan
AllowSupplementaryGroups yes

Start it and enable for reboot 

systemctl restart clamd@clamd.service
systemctl enable clamd@clamd.service

edit then /etc/mail/clamav-milter.conf 

MilterSocket inet:7357
User clamilt
AllowSupplementaryGroups yes
ClamdSocket tcp:127.0.0.1:3310
LogSyslog yes
OnClean Accept
OnInfected Reject
OnFail Defer

start the milter now and on reboot 

systemctl restart clamav-milter
systemctl enable clamav-milter

Enable TRIM on OSX 10.10 and 10.11

Posted on by Andy

Now after releasing the newest apple operating system i had some problems with the TRIM command for SSDs. As many of you know, apple keeps their IOAHCI driver for themself so that no other company can write a kernel extension. And as a plus they integrated a kext signing mechanism into Yosemite which leads to the inability to load unsigned kernel extensions.

Here is what you have to do in order to enable TRIM. Open your terminal and enter: 

# sudo su
# nvram boot-args=kext-dev-mode=1
# vim /Library/Preferences/SystemConfiguration/com.apple.Boot.plist

then change following lines 

<dict>
        <key>Kernel Flags</key>
        <string></string>
​</dict>

to 

<dict>
        <key>Kernel Flags</key>
        <string>kext-dev-mode=1</string>
​</dict>

After that, reboot your machine. The above modifications disable kext-signing system-wide!!!

After the reboot open the terminal again and enter 

# sudo su
# cd /System/Library/Extensions/IOAHCIFamily.kext
# cd Contents/PlugIns/IOAHCIBlockStorage.kext/Contents/MacOS
# cp IOAHCIBlockStorage IOAHCIBlockStorage.backup
# perl -pi -e 's|\x00\x41\x50\x50\x4c\x45\x20\x53\x53\x44\x00|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|sg' IOAHCIBlockStorage
# touch /System/Library/Extensions/
# kextcache -prelinked-kernel /System/Library/Caches/com.apple.kext.caches/Startup/kernelcache -K /System/Library/Kernels/kernel /System/Library/Extensions

then reboot again and everything should be fine again 😉

more infos here

UPDATE:

Starting with OSX 10.10.5 you have a built-in command to enable TRIM. Instead of manipulating the file IOAHCIBlockStorage, open the terminal and enter following command: 

# sudo trimforce enable