Re: [Clamav-users] Freshclam error
On 2009-08-24 22:24, Scott Mohnkern wrote: r...@zambezi:/var/clamav# freshclam -u clamav ClamAV update process started at Mon Aug 24 15:23:23 2009 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.94.2 Recommended version: 0.95.2 DON'T PANIC! Read http://www.clamav.net/support/faq ERROR: getfile: Can't create new file /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav Hint: The database directory must be writable for UID 441 or GID 204 WARNING: Can't download main.cvd from db.us.clamav.net This isn't a box I built, is there a way to check to see if selinux is running on it? (That would have this effect). I'm really only familiar with selinux on RHEL5 boxes. Look in dmesg: dmesg | grep -i selinux Also try running: strace freshclam 2log And look in dmesg for any avc messages. If you have SELinux try: ls -lZd /var/clamav ls -lZ `which freshclam` Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Freshclam error
On 2009-08-24 22:25, Scott Mohnkern wrote: I bet that selinux is running on here. Found this in /var/log/syslog Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58): type=1503 operation=inode_create requested_mask=w:: denied_mask=w:: name=/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e pid=6125 profile=/usr/bin/freshclam namespace=default For Ubuntu that may be Apparmor, see here: https://wiki.ubuntu.com/DebuggingApparmor Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Freshclam error
Well, here's what I found: [ 43.356010] SELinux: Disabled at boot. dmesg | grep avc came up blank 2009/8/25 Török Edwin edwinto...@gmail.com On 2009-08-24 22:24, Scott Mohnkern wrote: r...@zambezi:/var/clamav# freshclam -u clamav ClamAV update process started at Mon Aug 24 15:23:23 2009 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.94.2 Recommended version: 0.95.2 DON'T PANIC! Read http://www.clamav.net/support/faq ERROR: getfile: Can't create new file /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav Hint: The database directory must be writable for UID 441 or GID 204 WARNING: Can't download main.cvd from db.us.clamav.net This isn't a box I built, is there a way to check to see if selinux is running on it? (That would have this effect). I'm really only familiar with selinux on RHEL5 boxes. Look in dmesg: dmesg | grep -i selinux Also try running: strace freshclam 2log And look in dmesg for any avc messages. If you have SELinux try: ls -lZd /var/clamav ls -lZ `which freshclam` Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Scott Mohnkern ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Freshclam Error
On Tue, Aug 25, 2009 at 11:04:30AM -0400, Carlos Williams wrote: - /etc/init.d/clamav-freshclam restart So if I manually run the 'freshclam' daemon, then it will lock it up? The log is locked by the daemon. Should I never manually run this and just let the 'cron' job to auto update this? Updates are performed by the daemon, not via a cron job, if you chose so during installation. You can fine tune it with the Checks parameter in /etc/clamav/freshclam.conf. If you chose to update via cron job, the script /etc/init.d/clamav-freshclam says: If user wants it run from cron, we only accept no-daemon and stop Ciao, gc :-) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml