Noble verification
==================
lsb_release -a
Distributor ID: Ubuntu
Description: Ubuntu 24.04.4 LTS
Release: 24.04
Codename: noble
dpkg -l | grep clamav
ii clamav 1.5.3+dfsg-0ubuntu0.24.04.1
amd64 anti-virus utility for Unix - command-line interface
ii clamav-base 1.5.3+dfsg-0ubuntu0.24.04.1
all anti-virus utility for Unix - base package
ii clamav-daemon 1.5.3+dfsg-0ubuntu0.24.04.1
amd64 anti-virus utility for Unix - scanner daemon
ii clamav-freshclam 1.5.3+dfsg-0ubuntu0.24.04.1
amd64 anti-virus utility for Unix - virus database update utility
ii libclamav12:amd64 1.5.3+dfsg-0ubuntu0.24.04.1
amd64 anti-virus utility for Unix - library
Test Case #1
------------
dpkg-reconfigure and chose:
TCP, port 3330, IP: 10.108.97.204
root@clamav-noble-sru:~# sudo systemctl restart clamav-daemon
root@clamav-noble-sru:~# sudo ss -pln | grep 3330
root@clamav-noble-sru:~# printf "PING\n" | nc 10.108.97.204 3330
Nothing is listening on the configured IP:port and changes are not
reflected in the socket file
root@clamav-noble-sru:~# systemctl cat clamav-daemon.socket
# /usr/lib/systemd/system/clamav-daemon.socket
[Unit]
...
[Socket]
ListenStream=/run/clamav/clamd.ctl
#ListenStream=1024
SocketUser=clamav
SocketGroup=clamav
RemoveOnStop=True
[Install]
WantedBy=sockets.target
Test Case #2
------------
Check the UNIX socket configurability
root@clamav-noble-sru:~# sudo dpkg-reconfigure clamav-daemon
# Set the socket to clamd-alt.ctl, socketgroup to clamav-user, socketmode to 777
root@clamav-noble-sru:~# sudo systemctl restart clamav-daemon
root@clamav-noble-sru:~# printf "PING\n" | socat -
UNIX-CONNECT:/run/clamav/clamd-alt.ctl
2026/08/31 17:32:27 socat[4599] E connect(, AF=1 "/run/clamav/clamd-alt.ctl",
27): No such file or directory
root@clamav-noble-sru:~# systemctl cat clamav-daemon.socket
# /usr/lib/systemd/system/clamav-daemon.socket
[Unit]
...
[Socket]
ListenStream=/run/clamav/clamd.ctl
#ListenStream=1024
SocketUser=clamav
SocketGroup=clamav
RemoveOnStop=True
[Install]
WantedBy=sockets.target
Changes aren't reflected in the socket file
Proposed
--------
dpkg -l | grep clamav
ii clamav 1.5.3+dfsg-0ubuntu0.24.04.2
amd64 anti-virus utility for Unix - command-line interface
ii clamav-base 1.5.3+dfsg-0ubuntu0.24.04.2
all anti-virus utility for Unix - base package
ii clamav-daemon 1.5.3+dfsg-0ubuntu0.24.04.2
amd64 anti-virus utility for Unix - scanner daemon
ii clamav-freshclam 1.5.3+dfsg-0ubuntu0.24.04.2
amd64 anti-virus utility for Unix - virus database update utility
ii libclamav12:amd64 1.5.3+dfsg-0ubuntu0.24.04.2
amd64 anti-virus utility for Unix - library
Test Case #1
------------
dpkg-reconfigure and chose:
TCP, port 3330, IP: 10.108.97.204
root@clamav-noble-sru:~# sudo systemctl restart clamav-daemon
root@clamav-noble-sru:~# sudo ss -pln | grep 3330
tcp LISTEN 0 4096 10.108.97.204:3330
0.0.0.0:*
users:(("clamd",pid=11652,fd=3),("systemd",pid=1,fd=48))
root@clamav-noble-sru:~# printf "PING\n" | nc 10.108.97.204 3330
PONG
root@clamav-noble-sru:~# systemctl cat clamav-daemon.socket
# /usr/lib/systemd/system/clamav-daemon.socket
[Unit]
...
[Socket]
ListenStream=/run/clamav/clamd.ctl
#ListenStream=1024
SocketUser=clamav
SocketGroup=clamav
RemoveOnStop=True
[Install]
WantedBy=sockets.target
# /run/systemd/generator/clamav-daemon.socket.d/listen.conf
# Automatically generated by clamav-daemon-socket-generator
# Based on configuration in /etc/clamav/clamd.conf
[Socket]
# Clear any existing ListenStream directives
ListenStream=
ListenStream=10.108.97.204:3330
Socket file reflects changes and there's a listening socket that
responds
Test Case #2
------------
Check the UNIX socket configurability
root@clamav-noble-sru:~# sudo dpkg-reconfigure clamav-daemon
# Set the socket to clamd-alt.ctl, socketgroup to clamav-user, socketmode to 777
# Changes are reflected in the socket file
root@clamav-noble-sru:~# systemctl cat clamav-daemon.socket
# /usr/lib/systemd/system/clamav-daemon.socket
[Unit]
...
[Socket]
ListenStream=/run/clamav/clamd.ctl
#ListenStream=1024
SocketUser=clamav
SocketGroup=clamav
RemoveOnStop=True
[Install]
WantedBy=sockets.target
# /run/systemd/generator/clamav-daemon.socket.d/listen.conf
# Automatically generated by clamav-daemon-socket-generator
# Based on configuration in /etc/clamav/clamd.conf
[Socket]
# Clear any existing ListenStream directives
ListenStream=
ListenStream=/var/run/clamav/clamd-alt.ctl
SocketMode=777
SocketGroup=clamav-user
root@clamav-noble-sru:~# printf "PING\n" | socat -
UNIX-CONNECT:/run/clamav/clamd-alt.ctl
PONG
Verification passed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2129160
Title:
[FFe] [SRU] dpkg-reconfigure clamav-daemon does not respect TCP
configuration
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/2129160/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
