On Mon, 12 Jul 2010, noob wrote:
Hi All: I installed ClamAV 0.96.1 from source on Mac OS 10.6.4 (client,
not server) as part of an ASSP intallation.
I have installed from source on various OS X client versions with no
problems.
Logs are currently in /var/log/clamd.log and /var/log/freshclam.log
If I run freshclam, though, I receive an error:
Jul 12 09:34:43 mail net.clamav.clamd[950]: ERROR: Can't initialize the
internal logger
Jul 12 09:34:43 mail net.clamav.clamd[950]: ERROR: Can't open
/var/log/clamav/clamd.log in append mode (check permissions!).
Jul 12 09:34:43 mail com.apple.launchd[1] (net.clamav.clamd[950]): Exited
with exit code: 1
Jul 12 09:34:43 mail com.apple.launchd[1] (net.clamav.clamd): Throttling
respawn: Will start in 10 seconds
Jul 12 09:34:43 mail net.clamav.freshclam[951]: ERROR: Problem with
internal logger (UpdateLogFile =
/var/log/clamav/freshclam.log).
Jul 12 09:34:43 mail net.clamav.freshclam[951]: ERROR: Can't open
/var/log/clamav/freshclam.log in
append mode (check permissions!).
Jul 12 09:34:43 mail com.apple.launchd[1] (net.clamav.freshclam[951]):
Exited with exit code: 62
Well, maybe you need to do just what it says: "check permissions". And
maybe share with us what the permissions and ownership is for clamd.log
and freshclam.log.
Yes, Sorry!
The files in /var/log/clamav have the following:
-rw-r--r-- 1 _assp admin 0 Jul 12 03:15 clamd.log
-rw-r--r-- 1 _assp admin 0 Jul 12 03:15 freshclam.log
These files were created by an ASSP installer...and I modified the
clamd.conf and freshclam.conf to use this path.
Prior to that, when I compiled clamAV, the logs were in "/var/log" with
permissions:
-rw-r--r-- 1 _amavisd wheel 1837 Jul 11 17:45 clamd.log
-rw-r--r-- 1 _amavisd wheel 18676 Jul 12 08:16 freshclam.log
I would get the same "append" error when the logs were "/var/log"
I tried to change the ownership to "_clamav", but it didn't make any
difference.
I also tried adding user "_clamav" to group "_amavisd" and finally "wheel",
but that didn't help either.
My permissions and ownership for clamd.log are:
-rw-r----- 1 _amavisd admin 77026 Jul 12 10:51 /var/log/clamd.log
It's owned by _amavisd since I use amavisd-new to call ClamAV.
I do not use freshclam.log and instead have freshclam configured to log
via syslog.
I could try that if it would help...currently in my configuration file I
have:
UpdateLogFile /var/log/clamav/freshclam.log
Would I comment that out and use
LogSyslog yes ?
But it looks like you have both clamd and freshclam both starting
together. Are you sure you're just trying to run freshclam when this
happens?
I'm just running "sudo freshclam" in terminal.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
