Re: [Clamav-users] Freshclam error

2009-08-25 Thread Török Edwin
On 2009-08-24 22:24, Scott Mohnkern wrote:
 r...@zambezi:/var/clamav# freshclam -u clamav
 ClamAV update process started at Mon Aug 24 15:23:23 2009
 WARNING: Your ClamAV installation is OUTDATED!
 WARNING: Local version: 0.94.2 Recommended version: 0.95.2
 DON'T PANIC! Read http://www.clamav.net/support/faq
 ERROR: getfile: Can't create new file
 /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
 Hint: The database directory must be writable for UID 441 or GID 204
 WARNING: Can't download main.cvd from db.us.clamav.net

 This isn't a box I built, is there a way to check to see if selinux is
 running on it?  (That would have this effect).

 I'm really only familiar with selinux on RHEL5 boxes.

   

Look in dmesg: dmesg | grep -i selinux

Also try running:
strace freshclam 2log

And look in dmesg for any avc messages.

If you have SELinux try:
ls -lZd /var/clamav
ls -lZ `which freshclam`

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Freshclam error

2009-08-25 Thread Török Edwin
On 2009-08-24 22:25, Scott Mohnkern wrote:
 I bet that selinux is running on here.  Found this in /var/log/syslog
 Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58):
 type=1503 operation=inode_create requested_mask=w:: denied_mask=w::
 name=/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e pid=6125
 profile=/usr/bin/freshclam namespace=default

   

For Ubuntu that may be Apparmor, see here:
https://wiki.ubuntu.com/DebuggingApparmor

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Freshclam error

2009-08-25 Thread Scott Mohnkern
Well, here's what I found:
[   43.356010] SELinux:  Disabled at boot.


dmesg | grep avc came up blank






2009/8/25 Török Edwin edwinto...@gmail.com

 On 2009-08-24 22:24, Scott Mohnkern wrote:
  r...@zambezi:/var/clamav# freshclam -u clamav
  ClamAV update process started at Mon Aug 24 15:23:23 2009
  WARNING: Your ClamAV installation is OUTDATED!
  WARNING: Local version: 0.94.2 Recommended version: 0.95.2
  DON'T PANIC! Read http://www.clamav.net/support/faq
  ERROR: getfile: Can't create new file
  /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
  Hint: The database directory must be writable for UID 441 or GID 204
  WARNING: Can't download main.cvd from db.us.clamav.net
 
  This isn't a box I built, is there a way to check to see if selinux is
  running on it?  (That would have this effect).
 
  I'm really only familiar with selinux on RHEL5 boxes.
 
 

 Look in dmesg: dmesg | grep -i selinux

 Also try running:
 strace freshclam 2log

 And look in dmesg for any avc messages.

 If you have SELinux try:
 ls -lZd /var/clamav
 ls -lZ `which freshclam`

 Best regards,
 --Edwin
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam Error

2009-08-25 Thread Gian Carlo
On Tue, Aug 25, 2009 at 11:04:30AM -0400, Carlos Williams wrote:

  - /etc/init.d/clamav-freshclam restart
 
 So if I manually run the 'freshclam' daemon, then it will lock it up?
The log is locked by the daemon.

 Should I never manually run this and just let the 'cron' job to auto
 update this?
Updates are performed by the daemon, not via a cron job, if you chose so
during installation.
You can fine tune it with the Checks parameter in
/etc/clamav/freshclam.conf.

If you chose to update via cron job, the script
/etc/init.d/clamav-freshclam says:
If user wants it run from cron, we only accept no-daemon and stop

Ciao,
gc :-)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml