[Pkg-clamav-devel] Bug#749027: Bug#749027: The ClamAV daemon stops working.

[Andreas Cadhalpun]

Hi Jim,

On 06.06.2014 02:58, Jim Barber wrote:
> After reading the discussion on the upstream bug report, it looks like
> perhaps these error messages in the logs were relevant after all...
>
>      -> ERROR: ScanOnAccess: fanotify_init failed: Operation not permitted
>      -> ScanOnAccess: clamd must be started by root

Well, these caused the hang more or less indirectly.
The problem was not the content these messages convey, but rather that 
during logging of these messages, the thread doing so got killed, 
leaving the logg_mutex locked.

> Is ScanOnAccess something that is toggled depending on how you answer dpkg
> configuration questions?
> Or is it something I manually need to change in the
> /etc/clamav/clamd.conf ?

Run 'sudo dpkg-reconfigure clamav-daemon' and, when asked 'Do you want 
to enable on-access scanning?' answer with no.

> I didn't see a question relevant to it at installation time.

There are too many configuration options, so they are not asked at 
installation time, only when you run dpkg-reconfigure.

> I have done a fresh install of clamav-daemon on a virtual machine and
> ScanOnAccess is set to false.
> To my knowledge I never manually set it to true on the system that I
> have the
> issue with.
> So I can only guess that it was enabled in one of the older clamav-daemon
> packages and subsequent upgrades have preserved the setting?
> I've been using this Debian system for many years (I think since around
> 2009)
> Either that, or I set it so long ago I just can't remember doing it.

clamav 0.98.1+dfsg-3, which introduced these settings, created bogus 
configurations.
Upgrading from that version should have fixed these problems, but 
apparently it sometimes didn't.
To get the default settings, you can just purge clamav-daemon and 
clamav-freshclam and then install them again.

> Thanks for all your help resolving the issue Andreas.

Thanks for reporting this bug.

> I look forward to the fixed packages appearing in the Debian mirror.

There will be a new upload, once clamav 0.98.4 is released.

Best regards,
Andreas