System Administration Guide: Security Services

ProcedureHow to Exclude Files From Virus Scans

When you enable antivirus protection, you can specify that all files of specific types are excluded from the virus scan. Because the vscan service affects the performance of the system, you can conserve system resources by targeting specific file types for virus scans.

  1. Use the “VSCAN Management” RBAC profile to obtain the authorizations needed for managing the vscan service.

    Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map).

  2. View the list of all file types included in the virus scan.


    # vscanadm get -p types
    
  3. Specify the types of files to be scanned for virus:

    • Exclude a specific file type, for example the JPEG type, from the virus scan.


      # vscanadm set -p types=-jpg,+*
      
    • Include a specific file type, for example executable files, in the virus scan.


      # vscanadm set -p types=+exe,-*
      

    See the manpage for the vscanadm(1M) command for a description of the command.