Configure Imunify360/ImunifyAV ignore mask

Issue

This article describes the action by which you can configure a global list of ignored directories and files that will be skipped by the ai-bolit scanner.

Environment

• Imunify360
• ImunifyAV
• Malware Scanning
• Real-time scanning

Solution

The ignore mask is configured using regular expressions using the file: /etc/sysconfig/imunify360/malware-filters-admin-conf/ignored.txt

⚠️ For ignoring multiple paths or patterns, they must be added as a separate line in the ignore mask file.

1. Add the pattern to the file, e.g.:

^/home/[^/]+/old-[^/]

This mask is equal to /home/*/old-* mask. In addition to standard globbing (*, ?, character classes), Imunify360 also supports anchored regular-expression style patterns in the ignore mask.

• ^/path/to/dir$ → matches only the directory itself

• ^/path/to/dir(?:$|/) → matches the directory and everything inside it

• ^/path/to/dir.* → matches any file or directory starting with “dir”

• Example 1: telling that <.blocks> files will be ignored at <whatever> locations: */.blocks

+[^/]+/\.blocks

• Example 2: specify the following directory: /home/*/public_html/old-*

^/home/[^/]+/public_html/old-[^/]

2. After specifying the mask, restart the agent using the rebuild patterns command:

imunify360-agent malware rebuild patterns

imunify-antivirus malware rebuild patterns

Useful Links

https://docs.imunify360.com/faq_and_known_issues/#_21-how-to-edit-watched-and-excluded-patterns-for-malware-scanner