[Pkg-clamav-devel] Bug#760219: clamav-daemon: use of --name in init.d's stop-start-daemon causes failure to stop in certain virtualized environments

Daniel Dickinson debian-bugs at daniel.thecshore.com
Mon Sep 1 02:04:33 UTC 2014


Package: clamav-daemon
Version: 0.98.4+dfsg-0+deb7u2
Severity: normal

/etc/init.d/clamav-deamon uses --name in it's start-stop-daemon calls for stop and restart.

This fails when process names are not available due to use of certain virtualized environments
use as kfreebsd in freebsd jail (others have the same issue from reports I've read however this
is what I am use) due to limited /proc.

Changin relying solely on PIDFILE fixes the issue (i.e. drop --name $DAEMON)

-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
StatsHostID = "auto"
StatsEnabled disabled
StatsPEDisabled = "yes"
StatsTimeout = "10"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups disabled
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
PartitionIntersection disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
ForceToDisk disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "10"
MaxFiles = "10000"
MaxEmbeddedPE = "10485760"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "1048576"
MaxPartitions = "50"
MaxIconsPE = "100"
ScanOnAccess disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeUID disabled
OnAccessMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled

Config file: freshclam.conf
---------------------------
StatsHostID disabled
StatsEnabled disabled
StatsTimeout disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net"
PrivateMirror disabled
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"

Config file: clamav-milter.conf
-------------------------------
LogFile = "/var/log/clamav/clamav-milter.log"
LogFileUnlock disabled
LogFileMaxSize = "1048576"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile = "/var/run/clamav/clamav-milter.pid"
TemporaryDirectory = "/tmp"
FixStaleSocket = "yes"
MaxThreads = "10"
ReadTimeout = "120"
Foreground disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
MaxFileSize = "26214400"
ClamdSocket = "unix:/var/run/clamav/clamd.ctl"
MilterSocket = "/var/run/clamav/clamav-milter.ctl"
MilterSocketGroup = "clamav"
MilterSocketMode = "666"
LocalNet disabled
OnClean = "Accept"
OnInfected = "Quarantine"
OnFail = "Defer"
RejectMsg disabled
AddHeader = "Replace"
ReportHostname disabled
VirusAction disabled
Chroot disabled
Whitelist disabled
SkipAuthenticated disabled
LogInfected = "Off"
LogClean = "Off"
SupportMultipleRecipients disabled

Software settings
-----------------
Version: 0.98.4
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 JIT

Database information
--------------------
Database directory: /var/lib/clamav
daily.cvd: version 19318, sigs: 1094665, built on Mon Sep  1 10:00:50 2014
main.cvd: version 55, sigs: 2424225, built on Tue Sep 17 10:57:28 2013
bytecode.cvd: version 242, sigs: 46, built on Tue Jun 24 18:21:59 2014
Total number of signatures: 3518936

Platform information
--------------------
uname: GNU/kFreeBSD 9.2-RELEASE-p9 FreeBSD 9.2-RELEASE-p9 #0 r262572+cc525fe: Thu Jul  3 14:22:45 P x86_64
OS: kfreebsd-gnu, ARCH: x86_64, CPU: x86_64
zlib version: 1.2.7 (1.2.7), compile flags: a9
Triple: x86_64-pc-kfreebsd-gnu
CPU: generic, Little-endian
platform id: 0x09214d4d0804070201040702

Build information
-----------------
GNU C: 4.7.2 (4.7.2)
GNU C++: 4.7.2 (4.7.2)
CPPFLAGS: -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
CXXFLAGS: 
LDFLAGS: -Wl,-z,relro
Configure: '--build=x86_64-kfreebsd-gnu' '--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=/usr/lib/clamav' '--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall' 'LDFLAGS=-Wl,-z,relro' '--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-gnu-ld' '--with-system-tommath' '--without-included-ltdl' '-with-system-llvm=/usr/bin/llvm-config' 'build_alias=x86_64-kfreebsd-gnu'
sizeof(void*) = 8
Engine flevel: 77, dconf: 77

--- data dir ---
total 90386
-rw-r--r-- 1 clamav clamav    74230 Aug 31 21:39 bytecode.cvd
-rw-r--r-- 1 clamav clamav 27601161 Aug 31 21:39 daily.cvd
-rw-r--r-- 1 clamav clamav 64720632 Aug 31 21:39 main.cvd
-rw------- 1 clamav clamav       52 Aug 31 21:59 mirrors.dat

-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: kfreebsd-amd64 (x86_64)

Kernel: kFreeBSD 9.2-RELEASE-p9
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav-daemon depends on:
ii  adduser                         3.113+nmu3
ii  clamav-base                     0.98.4+dfsg-0+deb7u2
ii  clamav-freshclam [clamav-data]  0.98.4+dfsg-0+deb7u2
ii  debconf [debconf-2.0]           1.5.49
ii  dpkg                            1.16.15
ii  libbz2-1.0                      1.0.6-4
ii  libc0.1                         2.13-38+deb7u4
ii  libclamav6                      0.98.4+dfsg-0+deb7u2
ii  libncurses5                     5.9-10
ii  libssl1.0.0                     1.0.1e-2+deb7u12
ii  libtinfo5                       5.9-10
ii  lsb-base                        4.1+Debian8+deb7u1
ii  procps                          1:3.3.3-3
ii  ucf                             3.0025+nmu3
ii  zlib1g                          1:1.2.7.dfsg-13

clamav-daemon recommends no packages.

Versions of packages clamav-daemon suggests:
pn  apparmor     <none>
ii  clamav-docs  0.98.4+dfsg-0+deb7u2
pn  daemon       <none>

-- Configuration Files:
/etc/init.d/clamav-daemon changed [not included]

-- debconf information:
  clamav-daemon/debconf: true
  clamav-daemon/FixStaleSocket: true
  clamav-daemon/MaxHTMLNormalize: 10M
  clamav-daemon/User: clamav
  clamav-daemon/BytecodeSecurity: TrustSigned
  clamav-daemon/ScanSWF: true
  clamav-daemon/MaxDirectoryRecursion: 0
  clamav-daemon/MaxThreads: 12
  clamav-daemon/StatsPEDisabled: true
  clamav-daemon/FollowDirectorySymlinks: false
  clamav-daemon/StreamMaxLength: 25
  clamav-daemon/StatsEnabled: false
  clamav-daemon/ReadTimeout: 180
  clamav-daemon/LocalSocketGroup: clamav
  clamav-daemon/MaxScriptNormalize: 5M
  clamav-daemon/ForceToDisk: false
  clamav-daemon/MaxConnectionQueueLength: 15
  clamav-daemon/StatsHostID: auto
  clamav-daemon/LogRotate: true
  clamav-daemon/FollowFileSymlinks: false
  clamav-daemon/ScanOnAccess: false
  clamav-daemon/AllowAllMatchScan: true
  clamav-daemon/TCPSocket: 3310
  clamav-daemon/TCPAddr: any
  clamav-daemon/DisableCertCheck: false
  clamav-daemon/SelfCheck: 3600
  clamav-daemon/LocalSocket: /var/run/clamav/clamd.ctl
  clamav-daemon/LocalSocketMode: 666
  clamav-daemon/StatsTimeout: 10
  clamav-daemon/LogFile: /var/log/clamav/clamav.log
  clamav-daemon/ScanMail: true
  clamav-daemon/BytecodeTimeout: 60000
  clamav-daemon/OnAccessMaxFileSize: 5M
  clamav-daemon/LogTime: true
  clamav-daemon/TcpOrLocal: UNIX
  clamav-daemon/MaxZipTypeRcg: 1M
  clamav-daemon/MaxHTMLNoTags: 2M
  clamav-daemon/LogSyslog: false
  clamav-daemon/AddGroups:
  clamav-daemon/Bytecode: true
  clamav-daemon/ScanArchive: true
  clamav-daemon/MaxEmbeddedPE: 10M



More information about the Pkg-clamav-devel mailing list