I bet that selinux is running on here. Found this in /var/log/syslog Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58): type=1503 operation="inode_create" requested_mask="w::" denied_mask="w::" name="/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e" pid=6125 profile="/usr/bin/freshclam" namespace="default"
On Mon, Aug 24, 2009 at 12:46 PM, Scott Mohnkern <mohnk...@gmail.com> wrote: > I recently installed clamav .94 on an ubuntu box (8.04) and clamscan runs > just fine, however freshclam generates the following error: > > rwxrwxrwx 2 clamav 204 4096 2009-08-21 10:02 clamav > r...@zambezi:/var# freshclam > ClamAV update process started at Fri Aug 21 10:07:15 2009 > WARNING: Your ClamAV installation is OUTDATED! > WARNING: Local version: 0.94.2 Recommended version: 0.95.2 > DON'T PANIC! Read http://www.clamav.net/support/faq > ERROR: getfile: Can't create new file > /var/clamav/clamav-4c8bad43f85f4c58ba20de0e76a60468 in /var/clamav > Hint: The database directory must be writable for UID 441 or GID 204 > WARNING: Can't download main.cvd from db.us.clamav.net > > > > There's a user clamav, and /var/clamav is owned by 441:204 with write > permissions. I can also su to user clamav and touch (create) new files in > /var/clamav. > > > Anyone have any ideas? > > -- Scott Mohnkern _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml