[Pkg-clamav-devel] Bug#785203: clamav-freshclam: ERROR: Can't create temporary directory

[Rob Mason]

Package:   clamav
Version:     0.98.7+dfsg-0+deb7
Severity:   Serious

This error appears against 'freshclam', but I believe its related to 
clamav-base.

Following a dist-upgrade of clamav, the /var/lib/clamav directory 
ownership is reset to 'clamav'.  This behaviour is incorrect if clamav 
has been configured to run under a different UID such as 'defang'.

My scenario:

In /etc/clamd.conf, 'User' and 'LocalSocketGroup' are set to 'defang'.  
'AllowSupplementaryGroups' is set to 'false'
In /etc/freshclam.conf, 'DatabaseOwner' is set to 'defang'

Following an 'apt-get dist-upgrade' the output of 
'/var/log/clamav/freshclam.log' shows:

Wed May 13 13:14:42 2015 -> Update process terminated
Wed May 13 13:14:46 2015 -> --------------------------------------
Wed May 13 13:14:46 2015 -> freshclam daemon 0.98.7 (OS: linux-gnu, 
ARCH: x86_64, CPU: x86_64)
Wed May 13 13:14:46 2015 -> ERROR: Can't create temporary directory 
/var/lib/clamav/clamav-9cf028fe3f1d39c22fb44fa7e4f18bdf.tmp
Wed May 13 13:14:46 2015 -> Hint: The database directory must be 
writable for UID 112 or GID 114
Wed May 13 13:14:46 2015 -> --------------------------------------

Workaround is to manually change ownership back to the actual 
DatabaseOwner following a dist-upgrade.


Thanks

RobM


A Crown Commercial Service Supplier. CyberEssentials Certified QGCE013.

The original of this email was scanned by the Acasta SMTP mail relay for known viruses at 13:56 on 13/05/2015 and was found to be virus free - ClamAV 0.98.7/20452/Wed May 13 11:38:18 2015.
Acasta Ltd. Registered in England 6619191. 42 Pitt Street, Barnsley, S70 1BB. VAT Registered 934 6797 75.