Merge remote-tracking branch 'origin/aur'

4 files changed, 80 insertions, 6 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 9e8497f27683..157d471de927 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = kesl
 	pkgdesc = Kaspersky Endpoint Security 11.2.0 for Linux
 	pkgver = 11.2.0.4528
-	pkgrel = 2
+	pkgrel = 3
 	url = https://www.kaspersky.de/small-to-medium-business-security/endpoint-linux
 	install = kesl.install
 	changelog = kesl.changelog
@@ -19,11 +19,13 @@ pkgbase = kesl
 	source = https://products.s.kaspersky-labs.com/endpoints/keslinux10/11.2.0.4528/multilanguage-11.2.1.4528/3437373638347c44454c7c4e554c4c/kesl-gui_11.2.0-4528_amd64.deb
 	source = kesl.install
 	source = kesl.ini
+	source = kesl.start.conf
 	validpgpkeys = 6AFE173577C4CBD621DF217FD093435AA3ED2C4A
 	sha256sums = 44aef3025d9c440a87effa684169057d4a50d31dca9cc1e2e1d91a2cd42f6160
 	sha256sums = dc2c5c82cac25ba6ebf02220deb5c40fd2035bd24e74a62fb6d0bf3933e7db31
-	sha256sums = fb1a3921de63e89b399080a0a08face8eeac94a92d06d38e428e68ecabf00732
+	sha256sums = 926d6136a8c455b5aab649f3be547ca1a82a4920e8467f209c91ae6ee797d08f
 	sha256sums = 86203f1dcd663763bc9c8d51a98e510523189c7e78a7fb293183095b89bfa6cf
+	sha256sums = 29efcd166bb0fc5baa5a85dc0f41c6c2e253f6b8fd3ee723862496364281cb4c
 
 pkgname = kesl
 
diff --git a/PKGBUILD b/PKGBUILD
index 78fa582da473..596e9a3e09a6 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,7 +4,7 @@ pkgver=11.2.0.4528
 _pkgver_gui=11.2.1.4528
 _pkgverbuild=$(echo ${pkgver} | cut -d "." -f 4)
 _pkgver=$(echo ${pkgver} | cut -d "." -f 1-3)
-pkgrel=2
+pkgrel=3
 arch=('x86_64')
 pkgdesc='Kaspersky Endpoint Security 11.2.0 for Linux'
 url='https://www.kaspersky.de/small-to-medium-business-security/endpoint-linux'
@@ -22,11 +22,13 @@ changelog=${pkgname}.changelog
 source=( "https://products.s.kaspersky-labs.com/endpoints/keslinux10/${pkgver}/multilanguage-${pkgver}/3437313131347c44454c7c31/kesl_${_pkgver}-${_pkgverbuild}_amd64.deb"
          "https://products.s.kaspersky-labs.com/endpoints/keslinux10/${pkgver}/multilanguage-${_pkgver_gui}/3437373638347c44454c7c4e554c4c/kesl-gui_${_pkgver}-${_pkgverbuild}_amd64.deb"
          "${pkgname}.install"
-         "kesl.ini")
+         "kesl.ini"
+         "kesl.start.conf")
 sha256sums=('44aef3025d9c440a87effa684169057d4a50d31dca9cc1e2e1d91a2cd42f6160'
             'dc2c5c82cac25ba6ebf02220deb5c40fd2035bd24e74a62fb6d0bf3933e7db31'
-            'fb1a3921de63e89b399080a0a08face8eeac94a92d06d38e428e68ecabf00732'
-            '86203f1dcd663763bc9c8d51a98e510523189c7e78a7fb293183095b89bfa6cf')
+            '926d6136a8c455b5aab649f3be547ca1a82a4920e8467f209c91ae6ee797d08f'
+            '86203f1dcd663763bc9c8d51a98e510523189c7e78a7fb293183095b89bfa6cf'
+            '29efcd166bb0fc5baa5a85dc0f41c6c2e253f6b8fd3ee723862496364281cb4c')
 validpgpkeys=('6AFE173577C4CBD621DF217FD093435AA3ED2C4A')
 
 package_kesl() {
@@ -64,6 +66,10 @@ package_kesl() {
     for lic in $(find ${pkgdir}/var/opt/kaspersky/kesl/install/opt/kaspersky/kesl/doc/ -maxdepth 1 -mindepth 1 -type f |grep license);do
         install -Dm644 ${lic} "$pkgdir/usr/share/licenses/$pkgname/${lic/*\/}"
     done
+
+    # install startup config
+    cp kesl.start.conf ${pkgdir}/var/opt/kaspersky/kesl/pkgscripts/
+    sed -i "s/@PKGVER@/$pkgver/g" ${pkgdir}/var/opt/kaspersky/kesl/pkgscripts/kesl.start.conf
 }
 
 package_kesl-gui(){
diff --git a/kesl.install b/kesl.install
index de256d6310d1..52342e6a6649 100644
--- a/kesl.install
+++ b/kesl.install
@@ -155,6 +155,11 @@ post_install(){
             && echo "... scheduled virus database updates once within >${SCHEDULE_UPDATE_INTERVAL}< minutes"
     fi
 
+    # disable all modules except file threat protection (realtime/on-access)
+    # the user should enable the modules manually:
+    kesl-control --import-settings --file /var/opt/kaspersky/kesl/pkgscripts/kesl.start.conf \
+        && echo -e "... imported initial startup config - all modules disabled except realtime-scan\n"
+
     kesl_exportconf
     kesl_updatedb
 
diff --git a/kesl.start.conf b/kesl.start.conf
new file mode 100644
index 000000000000..7814c007efb9
--- /dev/null
+++ b/kesl.start.conf
@@ -0,0 +1,61 @@
+Version=@PKGVER@
+
+[MonitoringTask.item_0000]
+TaskName=File_Threat_Protection
+AdminKitTaskName=
+TaskType=OAS
+Active=Yes
+
+[MonitoringTask.item_0001]
+TaskName=System_Integrity_Monitoring
+AdminKitTaskName=
+TaskType=OAFIM
+Active=No
+
+[MonitoringTask.item_0002]
+TaskName=Firewall_Management
+AdminKitTaskName=
+TaskType=Firewall
+Active=No
+
+[MonitoringTask.item_0003]
+TaskName=Anti_Cryptor
+AdminKitTaskName=
+TaskType=AntiCryptor
+Active=No
+
+[MonitoringTask.item_0004]
+TaskName=Web_Threat_Protection
+AdminKitTaskName=
+TaskType=WTP
+Active=No
+
+[MonitoringTask.item_0005]
+TaskName=Device_Control
+AdminKitTaskName=
+TaskType=DeviceControl
+Active=No
+
+[MonitoringTask.item_0006]
+TaskName=Removable_Drives_Scan
+AdminKitTaskName=
+TaskType=RDS
+Active=No
+
+[MonitoringTask.item_0007]
+TaskName=Network_Threat_Protection
+AdminKitTaskName=
+TaskType=NTP
+Active=No
+
+[MonitoringTask.item_0008]
+TaskName=Behavior_Detection
+AdminKitTaskName=
+TaskType=BehaviorDetection
+Active=No
+
+[MonitoringTask.item_0009]
+TaskName=Application_Control
+AdminKitTaskName=
+TaskType=AppControl
+Active=No