I bet that selinux is running on here.  Found this in /var/log/syslog
Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58):
type=1503 operation="inode_create" requested_mask="w::" denied_mask="w::"
name="/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e" pid=6125
profile="/usr/bin/freshclam" namespace="default"


On Mon, Aug 24, 2009 at 12:46 PM, Scott Mohnkern <mohnk...@gmail.com> wrote:

> I recently installed clamav .94 on an ubuntu box (8.04) and clamscan runs
> just fine, however freshclam generates the following error:
>
> rwxrwxrwx  2 clamav   204  4096 2009-08-21 10:02 clamav
> r...@zambezi:/var# freshclam
> ClamAV update process started at Fri Aug 21 10:07:15 2009
> WARNING: Your ClamAV installation is OUTDATED!
> WARNING: Local version: 0.94.2 Recommended version: 0.95.2
> DON'T PANIC! Read http://www.clamav.net/support/faq
> ERROR: getfile: Can't create new file
> /var/clamav/clamav-4c8bad43f85f4c58ba20de0e76a60468 in /var/clamav
> Hint: The database directory must be writable for UID 441 or GID 204
> WARNING: Can't download main.cvd from db.us.clamav.net
>
>
>
> There's a user clamav, and /var/clamav is owned by 441:204 with write
> permissions. I can also su to user clamav and touch (create) new files in
> /var/clamav.
>
>
> Anyone have any ideas?
>
>


-- 
Scott Mohnkern
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to