launchd plists for ClamAV daemon control on OS X

clamav.conf

# logfilename          [owner:group]    mode count size when  flags [/pid_file] [sig_num]
/opt/local/var/log/clamav/*.log                644  3     1000    *   J

org.macports.clamd.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>GroupName</key>
	<string>_clamav</string>
	<key>KeepAlive</key>
	<true/>
	<key>Label</key>
	<string>org.macports.clamd</string>
	<key>OnDemand</key>
	<true/>
	<key>ProgramArguments</key>
	<array>
		<string>/opt/local/sbin/clamd</string>
	</array>
	<key>RunAtLoad</key>
	<true/>
	<key>UserName</key>
	<string>root</string>
</dict>
</plist>

org.macports.freshclam.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>GroupName</key>
	<string>_clamav</string>
	<key>Label</key>
	<string>org.macports.freshclam</string>
	<key>ProgramArguments</key>
	<array>
		<string>/opt/local/bin/freshclam</string>
	</array>
	<key>StartInterval</key>
	<integer>21600</integer>
	<key>UserName</key>
	<string>_clamav</string>
</dict>
</plist>

• clamav.conf goes in /etc/newsyslog.d/
• plists go in /Library/LaunchDaemons/
• clamd doesn't need to be running in order to use clamscan
• the freshclam.plist schedules downloading virus definition updates
• you have to configure clamd.conf and freshclam.conf in /opt/local/etc/ after port install clamav clamav-server

How does the ondemand work? You don't specify a socket?

Thanks for the freshclam plist file, I was looking for that exact thing today.