> Clamd died on two of our servers within hours of each > other. Both of them died after doing a database self > check. Both of them were running fine before the check. > Excerpts below from clamd.log: >
Hi, we found something similar . One of our servers crashed after the clamav SelfCheck. This happened today and yesterday. Each time it happened 60 seconds after the SelfCheck. ClamAV: Tue Jul 19 21:48:46 2005 -> SelfCheck: Database status OK. Wed Jul 20 21:19:32 2005 -> SelfCheck: Database status OK. messages: Jul 19 21:49:49 proftpd[3921]: xxxxxxxxxxxxxxxx (xxxxxxxxxxxxxxxxxxxxxx) - FTP session closed. Jul 20 21:20:46 kernel: grsec: From xx.xx.xx.xx: denied resource overstep by requesting 8007296 for RLIMIT_DATA against limit 8000000 for /opt/root/usr/bin/php-4.3.10[php:26517] uid/euid:xxxxx/xxxxx gid/egid:xxxxx/xxxxx, parent /usr/local/apache/bin/httpd[httpd:799] uid/euid:80/80 gid/egid:80/80 We are running a grsec enhanced 2.4.31 kernel. Selfcheck of ClamAV is set to 900 seconds. MemTotal: 2067988 kB MemFree: 36360 kB DUAL : Intel(R) Xeon(TM) CPU 2.40GHz regards M.Schwarz _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
