On Thu, 24 Jun 2004 at 8:45:08 -0400, Ace Suares wrote:
>
[...]
> However, after a couple of days running, I am getting this in /var/log/clamav:
>
> -rw-r----- 1 qscand adm 0 Jun 20 20:25 clamav.log
> -rw-r----- 1 qscand adm 2619368 Jun 25 14:43 clamav.log.1
> -rw-r----- 1 clamav adm 128026 Jun 14 04:36 clamav.log.2.gz
>
> Now, the last one (2.gz) might still be owned by clamav becuase of the
> original setup; however, the .0 ad .1 are properly owned by qscand. But as
If you use logrotate to rotate logs, check clamav related files in
/etc/logrotate.d/
Ownership of created log files may depend on "create" directive.
> the roation happens, youc an clearly see that the newly created file is not
> being used, instead everything is appended to .1
Check if "delaycompress" and something like:
postrotate
/etc/init.d/clamav-daemon reload > /dev/null
endscript
are present.
--
Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only
[EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros.
[EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
