[Pkg-clamav-devel] Bug#775400: clamav-freshclam: freshclam cant download virus definitions

[Sebastian Andrzej Siewior]

On 2015-01-16 21:45:35 [+0100], Sebastian Andrzej Siewior wrote:
> > I can reproduce this in a minimal jessie chroot with:
> > # apt install clamav-base
> > # apt remove clamav-base
> > # apt install clamav-base
> 
> Hah. How so? After my remove, "/var/lib/clamav/" was still owned by
> clamav:clamav. But this was on my working sid.

So for this to work, one needs to install _only_ clamav-base without
recommended packages. With "this" installation we have an empty
/var/lib/clamav which gets removed after "remove". With freshclam
installed and working we have a few files there and the directory won't
be removed anymore.

> > The problem is that clamav-base.postinst calls chown only on fresh
> > installations. This should be easy to fix by moving the chown calls out of
> > the 'if [ -z "$2" ]'.

Correct. Either this or a .keepme file but I would prefer to move that
test as you suggested.

> Isn't this also done as part of debconf? The user can be changed via debconf so
> ideally it should also chown the folder. And I think we did this. Or we
> wanted to split debconf from clamav-base to daemon and freshclam.

and here I mixed up the folder with clamd socket.

> > >>-- debconf information:
> > >>   clamav-freshclam/http_proxy: �
> > >this looks strange. But it is not your doing, right?
> > 
> > It seems the debconf setting is corrupted, which is really strange.
> 
> I will try to test the new d-i for jessie. So maybe I can reproduce
> this…

I haven't been able to reproduce this on a fresh jessie. I learned
that Germany has two cities to choose the timezone now. Other than that,
everything works as expected.
As Andreas said, one bug we can fix, the other (freshclam not
downloading anything) is expected if the proxy is broken. And we have
currently no idea how that deconf-db and later the freshclam.conf got
corrupted. But Ulrich's answer in the other email is a little
unexpected:

|I did nothing manually. Finally i took a look into /etc/clamav/freshclam.conf
|and found a active HTTPProxyServer line right below a FTPproxy line. The
|FTPproxy line was commented out but HTTPProxyServer was active. Both lines
|showed strange strings at the end of the line. I simply commented out the
|HTTPProxyServer line.

If you enter a http proxy via debconf then the config file will look like:
|# Proxy: host1
|HTTPProxyServer host1
so there should be this commented out "Proxy:" line, not "FTPproxy".
There is no "FTPproxy" string the whole package.

> > Best regards,
> > Andreas

Sebastian