| Inspect the system for a cron job or system service which executes a virus scanning tool regularly. |
To verify the McAfee VSEL system service is operational, run the following command:
# /etc/init.d/nails status
To check on the age of uvscan virus definition files, run the following command:
# cd /opt/NAI/LinuxShield/engine/dat
# ls -la avvscan.dat avvnames.dat avvclean.dat
If virus scanning software does not run continuously, or at least daily, or has signatures that are out of date, this is a finding.