[Pkg-clamav-devel] Bug#669287: clamav-daemon: if clamd is not running with userid clamav logrotate will go wrong

Ruud Baart support at prompt.nl
Wed Apr 11 20:46:06 UTC 2012


Package: clamav-daemon
Version: 0.97.3+dfsg-1~squeeze1
Severity: normal

I configured to run clamav with User = "amavis". This means that the logfiles in /var/log/clamav should be owned 
by "amavis". However in /etc/logrotate.d/clamav-daemon is "create 640  clamav adm". Logfile /var/log/clamav/clamav.log
can't be written after very logrotate.


-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
ExtendedDetectionInfo = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "amavis"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "amavis"
AllowSupplementaryGroups = "yes"
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros disabled
ScanPDF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "16"
MaxFiles = "10000"
ClamukoScanOnAccess disabled
ClamukoScannerCount = "3"
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoExcludeUID disabled
ClamukoMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled
DevLiblog disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net"
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"

clamav-milter.conf not found

Software settings
-----------------
Version: 0.97.3
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 RAR JIT

Database information
--------------------
Database directory: /var/lib/clamav
daily.cld: version 14774, sigs: 147392, built on Wed Apr 11 21:58:26 2012
main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 16:34:20 2011
bytecode.cvd: version 168, sigs: 38, built on Thu Mar  8 21:53:00 2012
Total number of signatures: 1191817

Platform information
--------------------
uname: Linux 3.2.0-0.bpo.2-686-pae #1 SMP Sun Mar 25 11:12:58 UTC 2012 i686
OS: linux-gnu, ARCH: i386, CPU: i486
Full OS version: Debian GNU/Linux 6.0.4 (squeeze)
zlib version: 1.2.3.4 (1.2.3.4), compile flags: 55
Triple: i386-pc-linux-gnu
CPU: core2, Little-endian
platform id: 0x0a113f3f0404040501040405

Build information
-----------------
GNU C: 4.4.5 (4.4.5)
GNU C++: 4.4.5 (4.4.5)
CPPFLAGS: 
CFLAGS: -Wall -g -O2
CXXFLAGS: -Wall -g -O2
LDFLAGS: 
Configure: '--build=i486-linux-gnu' '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-clamav' '--with-dbdir=/var/lib/clamav/' '--sysconfdir=/etc/clamav' '--enable-milter' '--disable-clamuko' '--with-gnu-ld' '--enable-dns-fix' '--disable-unrar' '--libdir=/usr/lib' '--with-system-tommath' '--with-ltdl-include=/usr/include' '--with-ltdl-lib=/usr/lib' 'build_alias=i486-linux-gnu' 'CFLAGS=-Wall -g -O2' 'LDFLAGS=' 'CPPFLAGS='
sizeof(void*) = 4
Engine flevel: 63, dconf: 63

--- data dir ---
total 39132
-rw-r--r-- 1 clamav clamav    59546 Mar 26 21:35 bytecode.cvd
-rw-r--r-- 1 clamav clamav  9193984 Apr 11 22:28 daily.cld
-rw-r--r-- 1 clamav clamav 30750647 Mar 26 21:35 main.cvd
-rw------- 1 clamav clamav      416 Apr 11 22:28 mirrors.dat

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-0.bpo.2-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamav-daemon depends on:
ii  clamav-base       0.97.3+dfsg-1~squeeze1 anti-virus utility for Unix - base
ii  clamav-freshclam  0.97.3+dfsg-1~squeeze1 anti-virus utility for Unix - viru
ii  libbz2-1.0        1.0.5-6+squeeze1       high-quality block-sorting file co
ii  libc6             2.11.3-3               Embedded GNU C Library: Shared lib
ii  libclamav6        0.97.3+dfsg-1~squeeze1 anti-virus utility for Unix - libr
ii  libncurses5       5.7+20100313-5         shared libraries for terminal hand
ii  libtommath0       0.39-4                 multiple-precision integer library
ii  lsb-base          3.2-23.2squeeze1       Linux Standard Base 3.2 init scrip
ii  ucf               3.0025+nmu1            Update Configuration File: preserv
ii  zlib1g            1:1.2.3.4.dfsg-3       compression library - runtime

clamav-daemon recommends no packages.

Versions of packages clamav-daemon suggests:
pn  clamav-docs                   <none>     (no description available)
pn  daemon                        <none>     (no description available)

-- no debconf information





More information about the Pkg-clamav-devel mailing list