Your message dated Fri, 26 Sep 2014 12:46:17 +0200
with message-id <[email protected]>
and subject line close "use of --name in … failure to stop in certain
virtualized environments" and its dupes
has caused the Debian Bug report #760219,
regarding clamav-daemon: use of --name in init.d's stop-start-daemon causes
failure to stop in certain virtualized environments
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
760219: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760219
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: clamav-daemon
Version: 0.98.4+dfsg-0+deb7u2
Severity: normal
/etc/init.d/clamav-deamon uses --name in it's start-stop-daemon calls for stop
and restart.
This fails when process names are not available due to use of certain
virtualized environments
use as kfreebsd in freebsd jail (others have the same issue from reports I've
read however this
is what I am use) due to limited /proc.
Changin relying solely on PIDFILE fixes the issue (i.e. drop --name $DAEMON)
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
StatsHostID = "auto"
StatsEnabled disabled
StatsPEDisabled = "yes"
StatsTimeout = "10"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups disabled
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
PartitionIntersection disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
ForceToDisk disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "10"
MaxFiles = "10000"
MaxEmbeddedPE = "10485760"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "1048576"
MaxPartitions = "50"
MaxIconsPE = "100"
ScanOnAccess disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeUID disabled
OnAccessMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled
Config file: freshclam.conf
---------------------------
StatsHostID disabled
StatsEnabled disabled
StatsTimeout disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net"
PrivateMirror disabled
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"
Config file: clamav-milter.conf
-------------------------------
LogFile = "/var/log/clamav/clamav-milter.log"
LogFileUnlock disabled
LogFileMaxSize = "1048576"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile = "/var/run/clamav/clamav-milter.pid"
TemporaryDirectory = "/tmp"
FixStaleSocket = "yes"
MaxThreads = "10"
ReadTimeout = "120"
Foreground disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
MaxFileSize = "26214400"
ClamdSocket = "unix:/var/run/clamav/clamd.ctl"
MilterSocket = "/var/run/clamav/clamav-milter.ctl"
MilterSocketGroup = "clamav"
MilterSocketMode = "666"
LocalNet disabled
OnClean = "Accept"
OnInfected = "Quarantine"
OnFail = "Defer"
RejectMsg disabled
AddHeader = "Replace"
ReportHostname disabled
VirusAction disabled
Chroot disabled
Whitelist disabled
SkipAuthenticated disabled
LogInfected = "Off"
LogClean = "Off"
SupportMultipleRecipients disabled
Software settings
-----------------
Version: 0.98.4
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
JIT
Database information
--------------------
Database directory: /var/lib/clamav
daily.cvd: version 19318, sigs: 1094665, built on Mon Sep 1 10:00:50 2014
main.cvd: version 55, sigs: 2424225, built on Tue Sep 17 10:57:28 2013
bytecode.cvd: version 242, sigs: 46, built on Tue Jun 24 18:21:59 2014
Total number of signatures: 3518936
Platform information
--------------------
uname: GNU/kFreeBSD 9.2-RELEASE-p9 FreeBSD 9.2-RELEASE-p9 #0 r262572+cc525fe:
Thu Jul 3 14:22:45 P x86_64
OS: kfreebsd-gnu, ARCH: x86_64, CPU: x86_64
zlib version: 1.2.7 (1.2.7), compile flags: a9
Triple: x86_64-pc-kfreebsd-gnu
CPU: generic, Little-endian
platform id: 0x09214d4d0804070201040702
Build information
-----------------
GNU C: 4.7.2 (4.7.2)
GNU C++: 4.7.2 (4.7.2)
CPPFLAGS: -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security -Wall -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
CXXFLAGS:
LDFLAGS: -Wl,-z,relro
Configure: '--build=x86_64-kfreebsd-gnu' '--prefix=/usr'
'--includedir=/usr/include' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--libexecdir=/usr/lib/clamav' '--disable-maintainer-mode'
'--disable-dependency-tracking' 'CFLAGS=-g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall'
'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall'
'LDFLAGS=-Wl,-z,relro' '--with-dbdir=/var/lib/clamav'
'--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar'
'--enable-milter' '--enable-dns-fix' '--with-gnu-ld' '--with-system-tommath'
'--without-included-ltdl' '-with-system-llvm=/usr/bin/llvm-config'
'build_alias=x86_64-kfreebsd-gnu'
sizeof(void*) = 8
Engine flevel: 77, dconf: 77
--- data dir ---
total 90386
-rw-r--r-- 1 clamav clamav 74230 Aug 31 21:39 bytecode.cvd
-rw-r--r-- 1 clamav clamav 27601161 Aug 31 21:39 daily.cvd
-rw-r--r-- 1 clamav clamav 64720632 Aug 31 21:39 main.cvd
-rw------- 1 clamav clamav 52 Aug 31 21:59 mirrors.dat
-- System Information:
Debian Release: 7.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: kfreebsd-amd64 (x86_64)
Kernel: kFreeBSD 9.2-RELEASE-p9
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages clamav-daemon depends on:
ii adduser 3.113+nmu3
ii clamav-base 0.98.4+dfsg-0+deb7u2
ii clamav-freshclam [clamav-data] 0.98.4+dfsg-0+deb7u2
ii debconf [debconf-2.0] 1.5.49
ii dpkg 1.16.15
ii libbz2-1.0 1.0.6-4
ii libc0.1 2.13-38+deb7u4
ii libclamav6 0.98.4+dfsg-0+deb7u2
ii libncurses5 5.9-10
ii libssl1.0.0 1.0.1e-2+deb7u12
ii libtinfo5 5.9-10
ii lsb-base 4.1+Debian8+deb7u1
ii procps 1:3.3.3-3
ii ucf 3.0025+nmu3
ii zlib1g 1:1.2.7.dfsg-13
clamav-daemon recommends no packages.
Versions of packages clamav-daemon suggests:
pn apparmor <none>
ii clamav-docs 0.98.4+dfsg-0+deb7u2
pn daemon <none>
-- Configuration Files:
/etc/init.d/clamav-daemon changed [not included]
-- debconf information:
clamav-daemon/debconf: true
clamav-daemon/FixStaleSocket: true
clamav-daemon/MaxHTMLNormalize: 10M
clamav-daemon/User: clamav
clamav-daemon/BytecodeSecurity: TrustSigned
clamav-daemon/ScanSWF: true
clamav-daemon/MaxDirectoryRecursion: 0
clamav-daemon/MaxThreads: 12
clamav-daemon/StatsPEDisabled: true
clamav-daemon/FollowDirectorySymlinks: false
clamav-daemon/StreamMaxLength: 25
clamav-daemon/StatsEnabled: false
clamav-daemon/ReadTimeout: 180
clamav-daemon/LocalSocketGroup: clamav
clamav-daemon/MaxScriptNormalize: 5M
clamav-daemon/ForceToDisk: false
clamav-daemon/MaxConnectionQueueLength: 15
clamav-daemon/StatsHostID: auto
clamav-daemon/LogRotate: true
clamav-daemon/FollowFileSymlinks: false
clamav-daemon/ScanOnAccess: false
clamav-daemon/AllowAllMatchScan: true
clamav-daemon/TCPSocket: 3310
clamav-daemon/TCPAddr: any
clamav-daemon/DisableCertCheck: false
clamav-daemon/SelfCheck: 3600
clamav-daemon/LocalSocket: /var/run/clamav/clamd.ctl
clamav-daemon/LocalSocketMode: 666
clamav-daemon/StatsTimeout: 10
clamav-daemon/LogFile: /var/log/clamav/clamav.log
clamav-daemon/ScanMail: true
clamav-daemon/BytecodeTimeout: 60000
clamav-daemon/OnAccessMaxFileSize: 5M
clamav-daemon/LogTime: true
clamav-daemon/TcpOrLocal: UNIX
clamav-daemon/MaxZipTypeRcg: 1M
clamav-daemon/MaxHTMLNoTags: 2M
clamav-daemon/LogSyslog: false
clamav-daemon/AddGroups:
clamav-daemon/Bytecode: true
clamav-daemon/ScanArchive: true
clamav-daemon/MaxEmbeddedPE: 10M
--- End Message ---
--- Begin Message ---
Hi,
hereby I close this bug (and its dupes). Almost three weeks passed with
a little feedback from the bug reported. The discussion is documented in
#760219.
The problem, as I understand it, is that certain kFreeBSD jails do not
expose the name of process matching a certain PID. The reporter claims that
he did the setup wrong (he didn't use linprocfs) and once this was fixed
he said "Given that linprocfs exists and things work properly when using
it …".
I doubt that using --name is something that can considered as a bug in
clamav's initscripts (with the history of #580188). This "problem" also
exists in other packages like unbound. If this is a real problem it
should be addressed in dpkg if at all (giving the fact that the reported
did not use linprocfs in the first place).
Sebastian
--- End Message ---
_______________________________________________
Pkg-clamav-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
