[Pkg-clamav-devel] Bug#915098: clamav-daemon: CommandReadTimeout default value should be increased to 30

[Raphaël Hertzog]

Package: clamav-daemon
Version: 0.100.2+dfsg-1
Severity: normal
Tags: patch

I just got bitten by a very annoying bug on my mail server. postfix gave
me "milter-reject: END-OF-MESSAGE" which was caused by clamav-milter
because clamav-daemon cut the connection with clamav-milter after 5 seconds
while it was still sending the message to analyze. 

The clamav-milter log was not very helpful to find this out:
Fri Nov 30 12:11:50 2018 -> ERROR: clamfi_eom: FD send failed: Broken pipe
Fri Nov 30 12:11:50 2018 -> ERROR: FD send failed

FWIW, I found the solution in this message:
https://i-mscp.net/thread/9756-clamav-plugin-error-with-clamav-milter/?postID=38368#post38368

So here's the patch that you should IMO apply:

--- clamav-0.100.2+dfsg/debian/clamav-daemon.postinst.in	2018-10-09 21:46:08.000000000 +0200
+++ clamav-0.100.2+dfsg/debian/clamav-daemon.postinst.in	2018-11-30 14:11:12.000000000 +0100
@@ -183,7 +183,7 @@
     [ -z "$ExtendedDetectionInfo" ] && ExtendedDetectionInfo=true
     [ -z "$DatabaseDirectory" ] && DatabaseDirectory='/var/lib/clamav'
     [ -z "$OfficialDatabaseOnly" ] && OfficialDatabaseOnly=false
-    [ -z "$CommandReadTimeout" ] && CommandReadTimeout=5
+    [ -z "$CommandReadTimeout" ] && CommandReadTimeout=30
     [ -z "$SendBufTimeout" ] && SendBufTimeout=200
     [ -z "$MaxQueue" ] && MaxQueue=100
     [ -z "$IdleTimeout" ] && IdleTimeout=30

I have lost multiple mails with big attachments due to this bad default
configuration value.

Cheers,

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages clamav-daemon depends on:
ii  adduser                         3.118
pn  clamav-base                     <none>
pn  clamav-freshclam | clamav-data  <none>
ii  debconf [debconf-2.0]           1.5.69
ii  dpkg                            1.19.2
ii  init-system-helpers             1.56
ii  libc6                           2.28-1
pn  libclamav7                      <none>
ii  libncurses5                     6.1+20181013-1
ii  libncurses6                     6.1+20181013-1
ii  libssl1.0.0                     1.0.1t-1+deb8u8
ii  libssl1.1                       1.1.1a-1
ii  libsystemd0                     239-13
ii  libtinfo5                       6.1+20181013-1
ii  libtinfo6                       6.1+20181013-1
ii  lsb-base                        10.2018112800
ii  procps                          2:3.3.15-2
ii  ucf                             3.0038
ii  zlib1g                          1:1.2.11.dfsg-1

Versions of packages clamav-daemon recommends:
pn  clamdscan  <none>

Versions of packages clamav-daemon suggests:
ii  apparmor     2.13.1-3+b1
pn  clamav-docs  <none>
pn  daemon       <none>