The table describes all available values and the default values of all the settings that you can specify for the Inventory task.
|
|
|
Setting
|
Description
|
Values
|
ScanScripts
|
Enables script scanning.
|
Yes (default value) — Scan scripts.
No — Do not scan scripts.
|
ScanBinaries
|
Enables binary files scanning (elf, java, and pyc).
|
Yes (default value) — Scan binaries.
No — Do not scan binaries.
|
ScanAllExecutable
|
Enables the scanning of files with an executable bit.
|
Yes (default value) — Scan files with an executable bit.
No — Do not scan files with an executable bit.
|
ScanPriority
|
Task priority. Task priority is a parameter that combines multiple internal Kaspersky Industrial CyberSecurity for Linux Nodes settings and process start settings. By using this setting, you can specify the way the application consumes system resources for running tasks.
|
Idle — Run the task with a low priority: no more than 10% of processor resource consumption. Specify this value to release the application resources for other tasks, including user processes. The current scan task takes longer to complete.
Normal (default value) — Run the task with a normal priority: no more than 50% of all processors resources.
High — Run the task with a high priority, without limiting the consumption of processor resources. Specify this value to perform the current scan task faster.
|
CreateGoldenImage
|
Enables creation of the "Golden Image" category of applications based on the list of applications detected on the device by the Inventory task. If CreateGoldenImage=Yes, then the "Golden Image" application category can be used in the application control rules.
|
Yes: create the "Golden Image" category of applications.
No (default value): do not create the "Golden Image" category of applications.
|
The [ScanScope.item_#] section contains the following settings:
|
AreaDesc
|
Description of inventory scope; contains additional information about the inventory scope. The maximum length of the string specified using this setting is 4096 characters.
|
Default value: All objects.
|
UseScanArea
|
Enables scans of the specified inventory scope. To run the task, enable scans of at least one inventory scope.
|
Yes (default value) — Scan the specified inventory scope.
No — Do not scan the specified inventory scope.
|
AreaMask
|
Inventory scope limitation. In the inventory scope, the application scans only the files that are specified using the masks in the shell format.
If this setting is not specified, the application scans all the objects in the inventory scope. You can specify several values for this setting.
|
The default value is * (scan all objects).
|
Path
|
Path to the directory with objects to be scanned.
|
<path to local directory> — Scan objects in the specified directory.
Default value: /usr/bin
|
The [ExcludedFromScanScope.item_#] section contains the following settings:
|
AreaDesc
|
Description of the inventory exclusion scope; contains additional information about the inventory scope.
|
The default value is not defined.
|
UseScanArea
|
Excludes the specified scope from the inventory.
|
Yes (default value) — Exclude the specified scope.
No — Do not exclude the specified scope.
|
AreaMask
|
Limiting the inventory exclusion scope using shell masks.
If this setting is not specified, the application excludes all the objects in the inventory scope. You can specify several values for this setting.
|
Default value: * (exclude all objects).
|
Path
|
Path to the directory with objects to be excluded.
|
<path to local directory> — Exclude objects in the specified directory from scan. You can use masks to specify the path.
You can use the * (asterisk) character to create a file or directory name mask.
You can indicate a single * character to represent any set of characters (including an empty set) preceding the / character in the file or directory name. For example, /dir/*/file or /dir/*/*/file.
You can indicate two consecutive * characters to represent any set of characters (including an empty set and the / character) in the file or directory name. For example, /dir/**/file*/ or /dir/file**/.
The ** mask can be used only once in a directory name. For example, /dir/**/**/file is an incorrect mask.
You can use a single ? character to represent any one character in the file or directory name.
|