On Mon, Jul 26, 2004 at 08:47:57PM +0000, Bennett Todd said: > First annoyance was that it took some pounding with a club to > convince this release to statically link. I ended up having to > hand-link each of the executables. If I ever find the alleged person > who committed "libtool"; I'll beat it to death with a stick in the > interests of eugenics.
Can't help you there, it compiles and liks fine here. > When I tried using the example clamav.conf's default LocalSocket > /tmp/clamd, clamdscan didn't, it opened the unix domain socket, > did a getpeername, then wandered off hanging on a TCP connect to a > seemingly random IP. Switching to a 127.0.0.1 TCP socket fixed that. > This may be due to my static linking with uClibc; this is certainly > a somewhat odd env, at least in the sense of "not exactly like what > everybody else does". This is a know issue, it's not just you. > And last, but it seems likely that this is a portable concern, when > I switched on "User clamav" (after creating the user, of course), > clamd could no longer write its pidfile in /var/run; evidently it > was tossing its privs before writing the pidfile. I can think of > two reasonable klugearounds for this. I'm guessing the main reason > for the current setup is so clamd knows it can unlink its pidfile > on exit. One decent kludge would be to either ignore pre-existing > pidfile on startup, or at least confirm, that the pid contained > in it exists and ignore it if not. That way unability to clean up > pidfile on exit would be benign. Alternatively, let the invoking > process fork a child that drops privs and does all the work, create > the pid file with the child's pid in it, and then wait for the child > to exit and do the cleanup (having retained root privs) then. Hmm. I > could do that from my init script if I cared enough:-). Or create a subdirectory, /var/run/clamav, owned by clamav. -- -------------------------------------------------------------------------- | Stephen Gran | Stability itself is nothing else than a | | [EMAIL PROTECTED] | more sluggish motion. | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
pgpu8RlgmKziq.pgp
Description: PGP signature
