tobias
6357c08bf1
- Pinned download URL for KESL 12.1.0-1297 (public Kaspersky CDN, 2024-07). - answer.txt updated to v12 autoinstall format: GROUP_CLEAN required, LOCALE=en_US.utf8 (en_US alone is rejected), INTERCEPTOR_MODE. - start.sh detects v10 (/etc/init.d/kesl-supervisor) vs v12 (/etc/init.d/kesl) and polls kesl-control until the daemon answers, because v12's first start runs an integrity check (~30s). - Modes (shell/version/scan/debug) and scan output format unchanged so existing parsers keep working. - README + build script point to tabledevil/kaspersky12. - test_smoke.sh validates image + version + EICAR; auto-skips on macOS (Rosetta blocks the daemon). Validated end-to-end on amd64 Linux: - 46 known-malicious files (LS26 detections) all flagged again - DetectSource=Local with --network=none + USE_KSN=No, no KSN calls Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
25 lines
761 B
Plaintext
25 lines
761 B
Plaintext
# KESL 12 autoinstall — offline on-demand scanner profile.
|
|
# Required fields per support.kaspersky.com/kes-for-linux/12.3.0/197593
|
|
EULA_AGREED=Yes
|
|
PRIVACY_POLICY_AGREED=Yes
|
|
USE_KSN=No
|
|
GROUP_CLEAN=No
|
|
|
|
# Locale + updater source: pull fresh sigs from KLServers at build time.
|
|
# LOCALE must be RFC 3066 with charset suffix (en_US alone is rejected).
|
|
LOCALE=en_US.utf8
|
|
UPDATER_SOURCE=KLServers
|
|
PROXY_SERVER=None
|
|
|
|
# Bake databases into the image so the container is offline-capable.
|
|
UPDATE_EXECUTE=Yes
|
|
|
|
# No kernel module / no GUI / no SELinux — we run on-demand scans only.
|
|
KERNEL_SRCS_INSTALL=No
|
|
USE_GUI=No
|
|
CONFIGURE_SELINUX=No
|
|
|
|
# RTP is unused but keep fanotify default for sanity.
|
|
INTERCEPTOR_MODE=UseFanotify
|
|
INTERCEPTOR_FALLBACK_STRATEGY=FallbackToFanotify
|