[Pkg-clamav-devel] Bug#696092: Bug#696092: clamav-daemon - clamd dies with GPF
This one time, at band camp, Bastian Blank said: On Sun, Dec 16, 2012 at 07:49:03PM +, Stephen Gran wrote: Can you please install the debug package, get a backtrace and send it? Lets see. First I need a core-file and I don't think clamd have logic for this. You said it happens every now and then. You can leave it running with gdb attached and get a backtrace whenever it dies. The file that is being scanned at the time would also be helpful. It was idle at the time. Interesting. Are you sure the memory is OK in the machine? cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#678247: Bug#678247: Fix debdiff
This one time, at band camp, Scott Kitterman said: I did test it. It defaults to 8080 if you don't specify. Perfect :) Just my memory being bad, then. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#658665: Bug#658665: clamav-daemon: assumes clamav uid and gid are the same
This one time, at band camp, Matt Taggart said: Package: clamav-daemon Version: 0.97.3+dfsg-1~lenny1 Somewhere in clamav-daemon it's assuming that the clamav uid and gid are the same. If I remove /var/run/clamav/clamav.ctl and then restart clamav, I get this /var/run/clamav# ls -la clamd.ctl s- 1 clamav postdrop0 Feb 4 15:07 clamd.ctl On my system the clamav user has uid 108 and the postdrop group has gid 108. When I set them to both use the same number then it works srw-rw-rw- 1 clamav clamav 0 Feb 4 15:58 clamd.ctl Can you send the output of `getent passwd clamav` ? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#652009: Bug#652009: Bug#652009: /usr/share/doc/clamav-testfiles: test signature not found in all files
This one time, at band camp, Farmbuyer said: On Tue, Dec 13, 2011 at 11:34 PM, Scott Kitterman sc...@kitterman.com wrote: On Tuesday, December 13, 2011 09:58:55 PM Farmbuyer wrote: Package: clamav-testfiles Version: 0.97.3+dfsg-2 Severity: minor File: /usr/share/doc/clamav-testfiles The files in clamav-testfiles are all supposed to be infected with a known test signature. Two of them aren't: $ clamscan /usr/share/clamav-testfiles/* | grep -v ClamAV-Test-File /usr/share/clamav-testfiles/clam-v2.rar: OK /usr/share/clamav-testfiles/clam-v3.rar: OK Do you have libclamunrar from non-free installed? Clamav can't scan rar files without it. I do not. Is this documented somewhere? I don't have access to /use/share/doc/clamav-testfiles right now to check. A note in README.Debian would be enough, if it's not already there. ~$ apt-cache show libclamunrar6 But yes, I suppose a note in README.Debian might be clearer. I've checked something in now. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#621206: Bug#621206: clamav: diff for NMU version 0.97+dfsg-2.1
This one time, at band camp, Luk Claes said: tags 621206 + patch thanks Dear maintainer, I've prepared an NMU for clamav (versioned as 0.97+dfsg-2.1) and will *not* upload it unless you tell me otherwise. Hi Luk, That seems sane enough. Just out of curiousity, has it been tested? I ask because clamav does use libltdl directly (to load the non-free rar support) and I'd hate to break this, which is why I've been sitting on my hands a bit. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] this is a test
ok ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] this is only a test
This one time, at band camp, Stephen Gran said: Were this not a test, there would be instruction for what to do in a zombie apocalypse. And a reply from the outside ... -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] this is only a test
This one time, at band camp, Stephen Gran said: Were this not a test, there would be instruction for what to do in a zombie apocalypse. And a reply from outside. -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#626547: Bug#626547: incorrect /var/run/clamav/freshclam.pid owner set if clamav installed on system with HAL
This one time, at band camp, juan.r.d.silva said: Package: clamav Version: 0.97+dfsg-2~squeeze1 Severity: important If you install Clamav after HAL was installed on system, a file /var/run/clamav/ freshclam.pid is created with root:haldaemon group:owner permissions and the following error is generated after installation: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: Permission denied But if you install Clamav on a fresh squeeze without HAL installed, the ownership of the same file is root:clamav instead, and Clamav does produce this error. Hi, I don't see how this is possible. Can you please send the output of id clamav id haldaemon Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#624380: Bug#624380: Bug#624380: clamav-base: Please package huge example files seperately or move them to clamav-docs
This one time, at band camp, Axel Beckert said: Hi Stephen, Stephen Gran wrote: With the exception of the example configuration file, those files are probably not needed by the vast majority of the clamav users, yet all of them have to waste those 26 MB of disk space and download time when installing e.g. freshclam which has a hard dependency. We've been around this before, unfortunately. The problem is that we can't require a network connection for users installing the software, and without these files, the dependencies can end up installing non-functional software. I'm afraid I don't see any way out of this one. Hmm, I then see the following three problems (or just don't understand the reasoning for it): Reading the postinst for clamav-base is a good place to start if you're not sure what is going on. A) Why are files necessary to get a working software installed in /usr/share/_doc_/$package/_examples_? IMHO that's a totally inappropriate location for them. They are copied into place for use if they are not there. This is a compromise with clamav-data, as the maintainer of that package wanted to ship them in place and didn't want a file clash. This also ensures that we don't overwrite a potentially newer downloaded version of the signatures with what we ship in the package, eg, on a security upgrade. B) What is the package clamav-data then for? It has btw. also a size of 26 MB. Coincidence? This is one of two possible dependencies for clamav. The other is freshclam, which needs to provide the files by the time it's postinst finishes. If a user chooses to run freshclam as a daemon (the default answer), the download is not guaranteed to finish by the time freshclam's postinst exits. C) clamav doesn't depend on clamav-base, it just recommends it. Just clamav-freshclam does depend on it, which, according to your arguments, does not need those files as the sole purpose of package is to fetch signature updates via the internet. clamav will install, but not do very much, in the absence of signatures. clamav-daemon and clamav-milter will not start in the absence of signatures. This is what is being addressed with this arrangement. Yes, we could ship the signatures with clamav-freshclam, but this means 26MB*number of arches in the archive instead of just 26MB. The current arrangement is a compromise, and possibly not the best one. If you have a suggestion that satisfies the following, I'd be happy to work with you on it: a) an installation of clamav-daemon or clamav-milter will always result in signatures being in place for use by the time their postinst runs. This means that the relationship to a package containing signatures is expressed in Dependencies in the packaging system. b) installation of signatures must be satisfiable in the archive. Network download of the signatures after install cannot be assumed. c) Putting the signatures into an arch any package instead of an arch all package is probably a no-go, as it's an extra 260MB in the archive for no real gain. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#624380: Bug#624380: clamav-base: Please package huge example files seperately or move them to clamav-docs
This one time, at band camp, Axel Beckert said: With the exception of the example configuration file, those files are probably not needed by the vast majority of the clamav users, yet all of them have to waste those 26 MB of disk space and download time when installing e.g. freshclam which has a hard dependency. Hi, We've been around this before, unfortunately. The problem is that we can't require a network connection for users installing the software, and without these files, the dependencies can end up installing non-functional software. I'm afraid I don't see any way out of this one. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Volatile Replaced Question....
This one time, at band camp, Philipp Kern said: ken, am Fri, Mar 04, 2011 at 06:58:24AM -0800 hast du folgendes geschrieben: Does this mean that people that use Lenny will no longer get Volatile updates? Our mail servers are running Lenny (and will not upgrade till we see a more stable Squeeze) and I know that we could use a new version of Clamav (version .97). in theory they get updates if the clamav-team would actually bother. I forwarded the complaints to them and they don't answer. It would be cool if there would be at least a it's unsupported answer now, or something's in preparation (Cc'ed). So, what are we doing with volatile in general? I understand you'd prefer not to keep using that mechanism for squeeze? I haven't heard any mention on this list, so it might be useful to outline what you (as RM and volatile admin) would like to see from us. Once we know a bit more what that is, we'll probably be more inclined to 'bother'. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#609683: Bug#609683: clamscan useless with amavis
This one time, at band camp, Grzegorz Bizon said: Default amavis invokes clamscan with --disable-summary deprecated option, and clamscan 0.96.5 version requires --no-summary option. --disable-summary shouldn't be ignored as to provide backward compatibility for amavisd-new package in stable. Hi, It's been some time since I looked at amavis, but isn't that configurable? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#605122: Bug#605122: excessive logging of Network is unreachable fills up /var[/log/clamav/freshclam.log]
This one time, at band camp, Enrico Zini said: although I purged freshclam (and clamav) from my system, a /usr/bin/freshclam -d --quiet process was left running, which kept the huge freshclam.log open, which left its disk space in /var/ allocated although I had deleted the file manually. freshclam being purged meant that the stop script in /etc/init.d was not there anymore to be used to shut freshclam down; killing the freshclam process manually obviously put an end to all the sufferings and freed that 1.2Gb I needed in my /var. I personally have no problems dealing with a scenario of disk space is not freed while the file is still open coupled with purging freshclam leaves the daemon running and freshclam keeps its logfile open all the time, but I can see how it all can cause a rather bad friday afternoon to many, especiall because at that point du and friends will not show you where the disk space is used anymore :( du and df disagreeing is almost always a sign of an open but deleted file. lsof is your friend in these cases. It sounds like the main bug is that the init script failed to kill freshclam here. Can you provide any more info or help us to reproduce it? I know that freshclam blocks some of the useful shutdown signals while it's in the chunk of code concerned with downloads (which, without a network, will be more time than normal), but the initscript does try very hard to make sure it's killed off even so. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#607053: Bug#607053: clamav-freshclam.ucf-dist created in cron.d directory
This one time, at band camp, Simon Day said: The file /etc/cron.d/clamav-freshclam.ucf-dist is created during install when you choose not to keep the maintainers version. While this is the desired behaviour for most config files, this is not desired in cron.d as it results in both your version and the maintainers version being executed This may be indicative of a wider problem with the packager/installer with any .d style config directory. I've checked in an rm -f for that file. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#600908: Bug#600908: Improvement to clamav-milter init script
This one time, at band camp, Chris Moules said: We have recently experienced the case that clamav-milter was 'running' but the socket file was missing. This caused our mail system (postfix) to reject mail with a temporary error. Monitoring the service by checking the return code from '/etc/init.d/clamav-milter status' did not catch this situation. I have updated the 'status' check to include a check for the sockets existence and an alternate error code (LSB correct, I believe). See attached patch. The patch also fixes the call to 'status_of_proc' with the variable $BASENAME in place of $NAME (which does not exist). It also moves the 'local' copy of the function 'status_of_proc' below the sourcing of '/lib/lsb/init-functions' so that this version of the function gets called. Before, this local copy of the function was just unused code in the init script. This local copy of the LSB function now checks the existence of the clamav-milter socket as defined in '$SOCKET_PATH'. Hi, Thanks for the patch. The status_of_proc function definition is only there for backports to older systems where the lsb_base stuff doesn't define it. It's designed to be overridden when possible. I'd like to leave it that way as much as possible, so we may rework your patch somewhat, but the idea is a good one. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] chown clamav:adm /etc/clamav/freshclam.conf ?
This one time, at band camp, Michael Tokarev said: What's the reason of chown'ing the conffile in the postinst script -- in the first place (the conf files are usually owned by root:root, except of unusual conditions), and unconditionally, even if an admin changed the ownership locally? To me the former is a serious bug, and the latter is a policy violation, but I'd like to know the reasoning before filing bugs. The config file can have proxy user/password settings in it. If this is the case, we try to ensure that the file is readable by the freshclam daemon, but not world readable. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Another upload to unstable, freeze exception?
This one time, at band camp, Michael Tautschnig said: Hi all, I'm considering to do another upload to unstable with the most recent changes; is there anything that should stop me from doing so? Furthermore, it would IMHO make sense to ask for a freeze exception to get that version into Squeeze. I'm not sure whether the release time will like this, but we could ask at least. In fact, this is the foremost reason for me for doing another upload to unstable, even though the previous version wasn't even sitting in there for a week. Do people have any opinions on those two points? Especially Stephen, what would you think? 14:37 sgran so, I've just been pinged by another member of pkg-clamav about another upload to unstable targetted at squeeze, and now I admit I'm confused. I remember quite a lot of discussion about doing it as a volatile only release, but I don't remember if that discussion was ever settled. What are we doing? 14:39 phil sgran: Upload to unstable and ask for an unblock. Michael: please proceed, and thanks for looking after it. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#592322: Bug#592322: freshclam.conf: update moves DatabaseMirror line
This one time, at band camp, Török Edwin said: After updating clamav-freshclam I got this diff: --- /etc/clamav/freshclam.conf 2010-06-10 15:40:04.624888178 +0300 +++ /var/lib/clamav/freshclam.conf 2010-08-09 12:03:46.265177327 +0300 I agree this is most likely a bug - we're probably not popping off the list in the same order we push onto it or something. However: -- Package-specific info: --- configuration --- Checking configuration files in /usr/local/etc Can you try without local versions installed, just to make sure nothing funny is happening as a result? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#586796: Bug#586796: clamav failed to update daily incremental db from remote server
This one time, at band camp, naths said: when trying to update with freshclam, it fail to update as daily-10813.cdiff not found on remote server (IP: 61.177.194.226) Can't download daily-10813.cdiff from db.local.clamav.net and Incremental update failed, trying to download daily.cvd Trying host db.local.clamav.net (61.177.194.226)... Downloading daily.cvd [100%] WARNING: Mirror 61.177.194.226 is not synchronized. earlier there was no problem with db update. Hi Luca, This sounds like a mirror gone stale. Can you take a look please? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#585002: Bug#585002: clamav-daemon segfault at start
This one time, at band camp, Sebastian Hofmann said: After upgrading start of clamav-daemon fails with a segfault: Starting ClamAV daemon: clamd /etc/init.d/clamav-daemon: line 308: 16305 Speicherzugriffsfehler start-stop-daemon --start -o -c $User --exec $DAEMON failed! Running clamd from command line, only this message is logged: Jun 8 10:33:30 s15210388 kernel: clamd[16637] general protection rip:2aba8f6ad730 rsp:7fff1b400c10 error:0 Nothing else to see in the logs. Does clamscan also segfault? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#577499: Bug#577499: Bug#577499: Me too
This one time, at band camp, Gordon Haverland said: After the 4 dpkg-reconfigure runs, things seem to be working. That was the end result mentioned above. That nothing in /etc/clamav changed after the fresh re-install (after purging) was interesting. What it looks like happened was: Due to a bug in our maintainer scripts, debconf put a bad value in the config file. This made clamd a bit wobbly and made freshclam unable to talk to it. You updated the config file manually. From here on, configuration did not change. The dpkg-reconfigure runs were to ensure that we didn't further screw up your configuration files - we passed that test, at least, by not writing more garbage into them. The reason it's all working now is that you have (by way of running dpkg-reconfigure in the right order) restarted both clamd and freshclam now that the correct config file is in place. You should be ok now, and thanks for helping us debug this. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#581408: Bug#581408: clamav-base: dpkg-reconfigure does not preserve the StreamMaxLength 0 customization
tags 581408 +pending thanks This one time, at band camp, Teodor said: Hi, I've upgraded clamav* packages and as usual (for older versions too) the upgrade doesn't preseve the custom change for StreamMaxLength which is always set to this 10M. I've runned 'dpkg-reconfigure' manually and this the only setting that is not preserved even though the custom value 0 is recognised on debconf questions. --- clamd.conf2010-05-12 21:02:50.0 +0300 +++ clamd.conf.ucf-dist 2010-05-12 21:17:09.0 +0300 @@ -18,7 +18,7 @@ ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 -StreamMaxLength 0 +StreamMaxLength 10M LogSyslog true LogFacility LOG_MAIL LogClean false Should be fixed in git now. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#581410: Bug#581410: clamav-milter: dpkg-reconfigure truncates the string from 'RejectMsg' to the first word
tags 581410 +pending thanks This one time, at band camp, Teodor said: I've upgraded clamav-milter package and as older versions the string from 'RejectMsg' was truncated to the first word during debconf prompt: | Specific rejection reason for infected messages: | Service but on current configuration is: | Service unavailable; Blocked INFECTED (%v) Should be fixed in git now. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#577499: Bug#577499: clamav-daemon will not start, even when purged and reinstalled
This one time, at band camp, Adam John Trickett said: It use to work okay, but since the recent upgrade it has stopped working, and I can't make it start normally. I've done a purge of all the clamav bits and reinstalled and it still refuses to start. Config is from virgin install. --- data dir --- total 78960 -rw-r--r-- 1 clamav clamav 3875328 May 7 16:43 daily.cld -rw-r--r-- 1 clamav clamav 22906487 May 7 14:42 main.cvd -rw--- 1 clamav clamav 208 May 7 17:43 mirrors.dat Try getting rid of all but these files, and disable the 3rd party signature script for now. It looks like you just don't have enough RAM to run clamav with all the signatures you have. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#577499: Bug#577499: clamav-daemon will not start, even when purged and reinstalled
This one time, at band camp, Dr A. J. Trickett said: Okay, I purged my database of sane security filters and other stuff, and it reloaded okay. I then added back just a fresh set of sane security filters and it also restarted. I don't know if it was an old/broken filter set that was the problem or it was just on the knife edge for memory but it is working at the moment. Great, I'm glad it's working for you. Hopefully it will stay working, but if not, you at least know where to start looking for next time. Regarding the bug, I don't know what to say, other than perhaps the package documentation should say you need plenty of RAM and and it may not be appropriate for people using a VM with only limited RAM. Would it be ok with you if we just made the error message slightly more helpful? I'd imagine something like: daemonize() failed: No more memory would be more helpful than just the current daemonize() failed. I'm a little leery of putting it in the package description because the memory usage of clamav is fairly fluid across versions and also heavily dependant on things like extra signatures, as you've seen. I don't want to let something like that bitrot and scare people off if upstream comes up with a more memory efficient way of signature loading, for example. Thanks for taking the time to respond and help me fix my problem, I only wish every package maintainer was as helpful. I wish every bug was this easy and every bug reporter answered as promptly as you :) Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#580020: Bug#580020: clamav-base: always edits /etc/aliases (does not respect admin changes)
This one time, at band camp, Tollef Fog Heen said: From clamav-base.postinst: if [ -f /etc/aliases ] || [ -L /etc/aliases ]; then if ! grep -qi ^clamav /etc/aliases; then echo clamav: root /etc/aliases newal=`which newaliases || true` if [ -n $newal ] [ -x $newal ]; then $newal || true fi fi fi This means there is no way for me to not have the clamav alias in /etc/aliases, for instance if I want to have it defined somewhere else. How do other packages do this for system users? I suppose just do it on fresh install and never again? I suppose I had never thought of removal of clamav from /etc/aliases as user configuration, but I see your point. Easy enough to fix. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#580020: Bug#580020: clamav-base: always edits /etc/aliases (does not respect admin changes)
This one time, at band camp, Tollef Fog Heen said: ]] Stephen Gran | How do other packages do this for system users? I suppose just do it on | fresh install and never again? That's probably the easiest way to do it. (Or rather, do it on initial installs and upgrades from version from before when the add alias call was added.) The latter case is lost in the mists of time - somewhere in the 0.7x series, I think. So I'll just go for fresh installs :) Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#580020: Bug#580020: clamav-base: always edits /etc/aliases (does not respect admin changes)
tags 580020 +pending thanks This one time, at band camp, Tollef Fog Heen said: This one time, at band camp, Stephen Gran said: ]] Stephen Gran | How do other packages do this for system users? I suppose just do it on | fresh install and never again? That's probably the easiest way to do it. (Or rather, do it on initial installs and upgrades from version from before when the add alias call was added.) http://git.debian.org/?p=pkg-clamav/clamav.git;a=commit;h=818f757885dae101763376d5777e26a53c8203d0 Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#577499: Bug#577499: Me too
This one time, at band camp, Gordon Haverland said: with the dfsg-2 update that came out, I seen LocalSocketGroup 20 thing with my computer. I set it to 125 (which is the group clamav is on this computer). Clamav started, but I started getting messages from freshclam (cron jobs) about some missing argument. Trying to fix things, I then got a message about freshclam not being able to contact clamd via /var/run/clamav/clamd.ctl. So, this morning, I purged all of clamav and reinstalled it. This message about clamd.ctl persists. Can you set LocalSocketGroup to clamav in the config file, run dpkg-reconfigure and see what it is in the file afterwards? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] default clamd listening socket
This one time, at band camp, Marco d'Itri said: Why does it bind to * by default? How much common is such a configuration? I think it should either bind to localhost or only create a unix domain socket by default. Really? The debconf template default to unix domain sockets. Can you provide steps to reproduce this claim? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Packaging clamav 0.96
This one time, at band camp, aCaB said:
Summary of things to be done:
- review the whole git history and make sure i didn't skrew anything up
in particular, review templates and postinst debconf scripts
They look ok to me, and they install here. I've uploaded to unstable.
Provided I didn't miss anything and it survives a day or so in unstable,
I'll do a volatile upload (unless Michael or someone beats me to it).
- check open bugs (this should be very quick)
Had a quick look over, but didn't see anything.
- check debian/rules in unrar (it makes with CFLAGS={$CFLAGS} but
CFLAGS is never set)
That should evaluate to CFLAGS='', which will parse but might be silly.
- make a decision about clamav in lenny - *there are only 6 days before
it will be massively killed*
Yeah, the release and security team are trying to get maintainers to
upload to volatile with the intention of doing a point release rollup of
all affected packages at some point in the future. In the meantime,
users of clamav + related software that don't use volatile are pretty
much screwed.
Cheers,
--
-
| ,''`.Stephen Gran |
| : :' :sg...@debian.org |
| `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
-
signature.asc
Description: Digital signature
___
Pkg-clamav-devel mailing list
Pkg-clamav-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Packaging clamav 0.96
This one time, at band camp, a...@digitalfuture.it said: Ah something I forgot... Is there anyone here who manages the git commit mail setup? My 1033 commits last night resulted in me, edwin and tomasz being flooded by ban mails (mailman telling us we sent too many emails for the day). Hopefully all the llvm commits are squashed in clamav and I didn't get those people spammed too. Is this fixxable? If not i'd suggest to squash upstream commits. I'd agree with you on squashing commits. Right now, it's just a pretty standard git post hook that looks at all the commits and sends a mail from the commit author to the mailing list. This approach is good enough for changes to the debian branch in general, but really isn't when we're doing upstream pulls. We can either change the git commit hook or change how we commit. I don't mind either way, but the latter seems easier (and possibly more correct) to me. Thoughts from others? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Packaging clamav 0.96
This one time, at band camp, Michael Tautschnig said: My git knowledge seems terribly limited in this regard - I had been doing exactly what was in the receipe I had posted and apparently got squashed commits; Alberto, at which steps did you deviate? I guess you did the git merge with --no-squash!? Don't worry, yours were done unsquashed as well :) The difference is actually in git merge, I think. If I am remembering my git fu correctly, something like git merge --squash, followed by git commit, should do the right thing here. It should produce a single, large commit by committer with all the upstream diffs merged into a single changeset, rather than a lot of small changes, each by the upstream authors. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#566620: Bug#566620: clamav-unofficial-sigs: please allow manual override of configuration in /usr/share
This one time, at band camp, Marc Haber said: Hi, please allow the local admin to override the default configuration which is read from /usr/share, for example by placing an identically-named file to /etc/clamav-unofficial-sigs.conf.d/. This is the widely used mechanism in Debian. I agree it's better placed in the package, but since it's just shell variables, you can do this already. See /etc/clamav-unofficial-sigs.conf on, eg, master.d.o. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Clamav upload(-message) missing
This one time, at band camp, Michael Tautschnig said: Hi! Yesterday I uploaded a clamav version for etch volatile but I never got a processing or acceptance/rejection message. Is there any way to track this down? From my side, everything looked fine: http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/2009-December/001435.html Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Bug#552469: (Little) progress
This one time, at band camp, Michael Tautschnig said: Hi! I just wanted to note that a request has been sent to debian-volatile [1] for some clarifications, but thus far there hasn't been any response. from #debian-volatile on oftc: 17:09 sgran phil: is anything blocking the clamav upload? 17:09 sgran (honest question - I didn't do the upload and haven't been watching carefully) 17:13 phil sgran: What should I know about a clamav upload? 17:13 sgran I thought there was an upload to volatile? 17:13 sgran was there not? 17:14 phil sgran: Maybe lack of communication, as a start. 17:14 phil There is a 0.95.3+dfsg-1~volatile1 in volatile-proposed, yes. 17:14 phil For Lenny that is. 17:15 phil AFAIK we were not contacted about it, there was no announcement prepared etc. 17:15 sgran ok, I will ask the uploader to contact you about it 17:17 sgran ah, there is a mail about libclamunrar, with no answer, but none about clamav itself 17:17 phil sgran: Yep. 17:17 phil sgran: That doesn't point one to the clamav upload in -proposed neither. 17:17 phil We currently react when we're pointed at the upload, FWIW, especially when there was no coordination beforehand. 17:17 phil I guess it's build and releaseable, but we'd need at least a text for the announcement. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#535672: Intent to NMU clamav to fix pending po-debconf l10n bugs
This one time, at band camp, Christian Perrier said: Dear Debian maintainer, The clamav Debian package, which you are the maintainer of, has pending bug report(s) which include translation updates or fixes for po-debconf, namely bug number 535672 (and maybe other similar bugs). Hi Christian, I am always happy for you to do an NMU of any of my packages for i18n work. That being said, there is a new upstream version out that I am trying to find the time to properly review. You may want to wait until after this weekend or so to do the call for translation and so on, as something may change in the templates as a result of the new version. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Packaging 0.95.3
This one time, at band camp, Michael Tautschnig said: Hi all, I'd just like to seek some coordination for packaging the new upstream release. As it wouldn't be the first time I do this, I should manage to get the new stuff merged in our git repository. I should be able to find some time to do so on Saturday, unless someone else steps up and prefers to do it themselves. That sounds great. I'm on call this weekend (as I was this week, which is why I haven't started looking yet, sigh), but I should be around on IRC if you want a hand. Unless someone objects, I'd also tell the i18n people about this such that their NMU effort gets stopped. That seems reasonable to me. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#553333: Bug#553333: clamav-milter: inet milter socket configuration changes the owner of /root to clamav
Hi there,
I understand how:
@@ -279,5 +279,5 @@ fi
make_dir $DataBaseDirectory
-if [ ${SOCKET_PATH#inet} = ${SOCKET_PATH} ]; then
+if [ ${SOCKET_TYPE} = local ]; then
make_dir $(dirname $SOCKET_PATH)
chown $User $(dirname $SOCKET_PATH)
could be a problem (maybe - if the variable $SOCKET_PATH includes the
string 'inet' but somehow the variable $SOCKET_PATH remains unset), but
I don't see how:
@@ -172,5 +172,5 @@ make_dir()
[ -n $User ] || User=clamav
mkdir -p -m 0755 $DIR
- chown $User:$User $DIR
+ chown $User $DIR
}
Cause any problems or indeed makes any difference?
Cheers,
--
-
| ,''`.Stephen Gran |
| : :' :sg...@debian.org |
| `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
-
signature.asc
Description: Digital signature
___
Pkg-clamav-devel mailing list
Pkg-clamav-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] [hol...@layer-acht.org: piuparts-MBF: owned and unowned files after purge]
This one time, at band camp, Michael Tautschnig said: Hi fellow developers, clamav is affected by this problem with the following files: 0m26.4s ERROR: FAIL: Package purging left files on system: /etc/clamav owned by: clamav-base /etc/clamav/clamd.conf not owned /var/lib/clamav owned by: clamav-base /var/lib/clamav/daily.cvd not owned /var/lib/clamav/main.cvd not owned Maybe I'll find the time to investigate this more detail, just don't know for sure and wanted to share what I had digged up anyway. The relevant section of the postrm: case $1 in purge) if [ -x /usr/bin/ucf ]; then UCFLIST=/etc/cron.d/clamav-daemon \ /etc/clamav.conf \ /etc/clamav/clamav.conf \ /etc/clamav/clamd.conf \ /var/lib/clamav/clamav.conf.*.md5 for i in $UCFLIST; do ucf -p $i || true if [ -e $i ]; then rm -f $i || true fi done fi rm -f /var/log/clamav/clamav.log* /etc/clamav/clamav.conf.dpkg-old /etc/clamav/clamd.conf.dpkg-old /etc/clamav/clamd.conf.ucf-old if [ -x /usr/sbin/userdel ]; then userdel clamav || true fi if [ -x /usr/sbin/groupdel ]; then groupdel clamav || true fi rm -f /var/lib/clamav/*.md5sum || true for dir in /etc/clamav/ /var/log/clamav /var/lib/clamav/; do if [ -d $dir ]; then rmdir $dir --ignore-fail-on-non-empty || true fi done ;; So I see why it leaves /var/lib/clamav/daily.cvd and /var/lib/clamav/main.cvd - that's a bug. I don't understand why it leaves /etc/clamav/clamd.conf, since it's in $UCFLIST and those files should be rm'ed. Hmmm. -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] [hol...@layer-acht.org: piuparts-MBF: owned and unowned files after purge]
This one time, at band camp, Michael Tautschnig said: Ah, no, it's obvious, looking at [1] once again: ucf is removed before clamav-base is purged. How should we handle this situation? Move the rm -f stuff outside the if [ -x ucf ]? Ah, of course. Yes, that's the simplest. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#550641: postinst requires usr/share/doc
This one time, at band camp, Justin Pryzby said: Third, I'd like to ask why you think optionally installing a default config file (or db file) from the example shipped in, uh, the examples/ directory is a bug. Optionally? It seems to me that this will fail in postinst configure if u/s/d and $db.cvd, $db.cld, $db.inc all don't exist. install -m 0644 -o $user -g $user /usr/share/doc/clamav-base/examples/$db.cvd $DATABASEDIR Ah, yes, that will fail. I was looking at the config file copying earlier on. I can move those to /usr/share/clamav or something. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#550641: postinst requires usr/share/doc
This one time, at band camp, Debian Bug Tracking System said: Bug #550641 [lintian] postinst depends on usr/share/doc Bug reassigned from package 'lintian' to 'clamav-base'. Bug No longer marked as found in versions lintian/1.23.8. First, I'd like to thank you for the heads up about the bug. Second, I'd like to ask why you're filing bugs based on a naive sed. Third, I'd like to ask why you think optionally installing a default config file (or db file) from the example shipped in, uh, the examples/ directory is a bug. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#545969: Bug#545969: clamav-freshclam: please support multiple network interfaces
This one time, at band camp, Johannes Rohr said: 2009/9/10 Stephen Gran sg...@debian.org Can you tell us how you're trying to make it work and how it is failing? It is designed to work with multiple interfaces. dpkg-reconfigure clamav-freshclam select the if-up.d method next I am promted for the name of exactly one network interface. It doesn't say anything about 'exactly one' interface. I can see how it implies it, but it's not meant that way. It does handle multiple interfaces, space seperated. If you have a better idea for wording that both makes it clear that multiple interfaces are supported, but not essential, please feel free to make suggestions. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#543309: Bug#543309: local socket clamav-milter.ctl unsafe - milter set to error state
severity 543309 normal thanks This one time, at band camp, Mark Rushing said: Package: clamav-milter Version: 0.95.2+dfsg-1~volatile1 Severity: grave Justification: renders package unusable Let's not be silly. The package is usable by everyone who doesn't use the included m4, including postfix users and sendmail users who don't use the included convenience macro. clamav-milter installs an m4 macro in /etc/mail/m4/clamav-milter.m4 The installation documentation says to include this macro in your sendmail.mc file. INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.ctl, F=, T=S:4m;R:4m')dnl That line points to a non-existent socket. The actual socket name is, instead, 'milter.ctl'. Thanks for the report - fixed in our git repo. -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Clamav version 0.95.2 on lenny-volatile ?
This one time, at band camp, Franck LEPRETTE said: Hello, Can you help me and tell me when it is intended to get 0.95.2 version on debian lenny-volatile ? Soon - I think the last major issues in unstable have been cleared, so we're pretty much ready for an upload to volatile. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] New upload?
Hello all, I've done a little cleanup on the various branches and think it's ready for another upload. Any comments before it's uploaded? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] New upload
This one time, at band camp, Michael Meskes said: On Tue, Jun 16, 2009 at 09:23:01PM +0100, Stephen Gran wrote: was doing this work on IRC, that may not have been enough of a heads up. Which IRC channel? #debian-clamav on irc.debian.org. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] New upload
This one time, at band camp, Michael Meskes said: Hi, I wonder what happened with our last upload? We already had quite some work doen for a potential 0.95.1+dfsg-3 upload that is still listed in the changelog but apparently was re-done for 0.95.2+dfsg-1, especially the whole Smith review thing. Actually some changes that were made are not listed in the latest changelog entry. Hmm. I'm sorry if I missed something when I was going through it over the weekend. I may have overlooked some things in the long slog to get it out the door. I also realize in retrospect that, while I mentioned I was doing this work on IRC, that may not have been enough of a heads up. I don't think it's a good idea to do the same work several times, so I'd like to figure out what went wrong and how to correctly work with our git archive. Agreed - it wasn't on purpose, it was just my usual error. Also I just found out that I added a patch to debian/etch-volatile (adding status_of_proc) that apparently should have gone to debian/unstable, at least that's where Stephen fixed it. So the next question popping up is, how to fix bugs in other branches? It went into unstable since it's harmless (it's defined before the lsb stuff is sourced, which will override it if present), and it was more effort than it was worth to not include it there while I was fixing it in etch. As for fixing it in etch, we just need to make a volatile upload for etch (and lenny, while we're at it). I asked on IRC last night if someone could write the VUA, but it's probably better to ask here. Does anyone have some time to write one up? -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] cannot sent email to this list
This one time, at band camp, Michael Meskes said: Anyone with an idea what's going wrong? It looks like maybe policyd-weight has gotten it's cache confused. I've restarted it, we'll see how it does. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#525483: Bug#525483: clamav in lenny segfaults after freshclam update
This one time, at band camp, Brett Dikeman said: Package: clamav-daemon Version: 0.94.dfsg.2-1lenny2 Severity: grave Marked as grave severity because this bug causes the host in question to stop delivering most email, and it is extremely reproducible (more than once per day, in some cases.) It would have been great if you had used reportbug to send this report, as it would have saved several roundtrips asking for information. Can you reportbug -M clamav, and then just send the information the scripts place in the bug report to this report? Copy and paste into a mail from gmail will be fine, I just care about the information. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#523878: Bug#523878: clamav-docs: unneeded dependency on sharutils
This one time, at band camp, Török Edwin said: $ apt-cache depends clamav-docs clamav-docs Depends: sharutils Nothing in clamav-docs needs sharutils, thus clamav-docs shouldn't depend on it. I think I remember this one, although it's lost in the mists of time. The problem was that for a while, the build of the docs didn't include the icons in the html. I had to add them manually, but you can't add binary blobs to the diff, since patch explodes, so I had to uuencode them and uudecode them on install. But you're right, that's all fixed now, and we can drop the dependency. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Request for review of new debconf questions (clamav)
Hi Christian! This one time, at band camp, Christian Perrier said: If you agree with this version (please check itthis is based on the templates file we discussed about, 10 days agoI haven't checked whether you actually added tempaltes), I propose sending the call for translations myself, just as I do when we conduct a full review. As always, thank you very much for your thorough review. Some comments in line below. Template: clamav-milter/debconf Looks great. Template: clamav-milter/FixStaleSocket Looks great. Template: clamav-milter/User Type: string Default: clamav _Description: User to run clamav-milter as: It is recommended to run the ClamAV programs as a non-privileged user. This will work with most MTAs with a little tweaking. However, using clamd for file system scans will require running clamav-milter as root. . Please see README.Debian in the clamav-base package for details. The bit about filesystem scans makes no sense for the milter - I think this language was copied directly from the template for clamav-daemon, where it does make some sense. I think we should just drop the sentence beginning with However. Template: clamav-milter/AddGroups Looks great. Template: clamav-milter/ReadTimeout Looks great. Template: clamav-milter/Foreground Type: boolean Default: false _Description: Should clamav-milter stay in foreground (not forking)? Setting this option is only useful for debugging and is actively harmful (it will prevent the init script from returning at system boot time, potentially breaking bootup). We should drop this option altogether. Admins can still add it for debugging purposes manually. If we want to support running clamav-milter from a supervisor (as we do for clamav-daemon and so on), then we should change the template to be clear that that is what we're talking about. Template: clamav-milter/Chroot Looks great. Template: clamav-milter/PidFile Looks great. Template: clamav-milter/TemporaryDirectory Looks great. Template: clamav-milter/ClamdSocket Type: string Default: unix:/var/run/clamav/clamd.ctl My only comment here is that I'd like the default to be pulled from clamav-daemon, if possible. I don't think this affects the templates at all, just the code, but I wanted to double check with you. Template: clamav-milter/LocalNet Looks great. Template: clamav-milter/Whitelist Looks great. Template: clamav-milter/OnClean ... This setting is meant for testing purposes only. Since this is just for testing, I don't think it's useful to offer a debconf template for it. Let's just drop it altogether. Template: clamav-milter/OnInfected Looks great. Template: clamav-milter/OnFail Looks great. Template: clamav-milter/RejectMsg Looks great. Template: clamav-milter/AddHeader Looks great. Template: clamav-milter/LogFile Looks great. Template: clamav-milter/LogFileUnlock Looks great. Template: clamav-milter/LogFileMaxSize Looks great. Template: clamav-milter/LogTime Looks great. Template: clamav-milter/LogSyslog Looks great. Template: clamav-milter/LogFacility Looks great. Template: clamav-milter/LogVerbose Looks great. Template: clamav-milter/LogInfected Looks great. Template: clamav-milter/MaxFileSize Looks great. Thanks again, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#521668: Bug#521668: clamav-milter: fails to install with postinst error
This one time, at band camp, Török Edwin said: Package: clamav-milter Version: 0.95+dfsg-1 Severity: important clamav-milter cannot be configured: Fixed in git and pending upload. -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#521668: Bug#521668: postinst
This one time, at band camp, Török Edwin said: Again it hanged there. The fix is not trivial, so I'm giving up here and wait for you to fix it ;) Yes, there were several issues discovered in upgrade testing the other day. Basically the series of patches starting at: http://git.debian.org/?p=pkg-clamav/clamav.git;a=commit;h=358e583aa4f75160f59e6cca25e493b01712717f And moving forward. -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#521606: Bug#521606: clamav-base: cannot install because /var/run/clamav does not exist
This one time, at band camp, Hideki Yamane said: I cannot install clamav, because of its install scripts bug. This is fixed in our git tree: http://git.debian.org/?p=pkg-clamav/clamav.git;a=commitdiff;h=c704b2a338e510d43c47d885224d92326b86c8c7 It's pending for a -2 upload shortly. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] request for review of templates
Hi all, Upstream has done some reshuffling, and we now have a new config file to handle (yay!). This means a bunch of new debconf questions, which means a bunch of new templates. I would greatly appreciate it if people could assist us in creating a reasonable set of templates, and then help us to get translations for the templates once the review and edits are complete. You've done a wonderful job in the past, which means I am going to abuse your hospitality once more :) I've attached the current version for review. I'm setting the clamav project mailing list in the cc, please keep that list in the loop, as I'm fairly sure most people in the clamav project are not subscribed to -i18n. Thanks in advance, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - Template: clamav-milter/debconf Type: boolean Default: true _Description: Handle the configuration file automatically? Some options must be configured for clamav-milter. . The ClamAV suite won't work if it isn't configured. If you do not configure it automatically, you'll have to configure /etc/clamav/clamav-milter.conf manually or run 'dpkg-reconfigure clamav-milter' later. In any case, manual changes in /etc/clamav/clamav-milter.conf will be respected. Template: clamav-milter/MilterSocket Type: string Default: /var/run/clamav/milter.ctl _Description: Define the interface through to communicate with sendmail: Possible formats are: . Unix domain socket: [[unix|local]:]/path/to/file . IPv4 socket: inet:p...@[hostname|ip-address] . IPv6 socket: inet6:p...@[hostname|ip-address] Template: clamav-milter/FixStaleSocket Type: boolean Default: true _Description: Remove stale socket after unclean shutdown? Template: clamav-milter/User Type: string Default: clamav _Description: User to run clamav-milter as: It is recommended to run the ClamAV programs as a non-privileged user. This will work with most MTAs with a little tweaking, but if you want to use clamd for filesystem scans, running as root is probably unavoidable. Please see README.Debian in the clamav-base package for details. Template: clamav-milter/AddGroups Type: string _Description: Groups for clamav-milter (space-separated): By default, clamav-milter runs as a non-privileged user. If you need clamav-milter to be able to access files owned by another user (e.g., in combination with an MTA), then you will need to add clamav to the group for that piece of software. Please see README.Debian in the clamav-base package for details. Template: clamav-milter/ReadTimeout Type: string Default: 120 _Description: Waiting for data from clamd will timeout after this time (seconds): Set to a value of '0' to disable the timeout. Template: clamav-milter/Foreground Type: boolean Default: false _Description: Stay in foreground (don't fork)? Template: clamav-milter/Chroot Type: string _Description: Chroot to directory: Chrooting is performed just after reading the config file and before dropping privileges. An empty value means don't chroot. Template: clamav-milter/PidFile Type: string Default: /var/run/clamav/clamav-milter.pid _Description: PID file: This option allows you to save a process identifier of the listening daemon (main thread). Template: clamav-milter/TemporaryDirectory Type: string Default: /tmp _Description: Optional path to the global temporary directory: If unset, $TMPDIR and $TEMP will be honored. Template: clamav-milter/ClamdSocket Type: string Default: unix:/var/run/clamav/clamd.ctl _Description: Define the clamd socket to connect to for scanning: To refer to a local unix socket using a absolute path, use unix:path (e.g., unix:/var/run/clamd/clamd.socket). A local or remote TCP socket is specified using the tcp:host:port syntax. The host can be a hostname or an ip address; the :port field is only required for IPv6 addresses, otherwise it defaults to 3310 (e.g., tcp:192.168.0.1). . This option can be repeated several times (separated by whitespace) with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion. Template: clamav-milter/LocalNet Type: string _Description: Exclusions - IP ranges: Messages originating from these hosts/networks will not be scanned. This option takes a host(name)/mask pair in CIRD notation and can be repeated several times (separated by whitespace). If /mask is omitted, a host is assumed. To specify a locally originated, non-smtp, email use the keyword local. . If unset, everything regardless of the origin is scanned. Template: clamav-milter/Whitelist Type: string _Description: Exclusions - Regular expressions
[Pkg-clamav-devel] Another upload?
Hey everyone, I just did some upgrade testing, and did some fixups for the various hiccups I found while testing various things. Since all of these are pretty clearly low hanging fruit that will hit people doing an upgrade or a fresh install, what do people think about another upload? I know that ideally we'd wait for the fixed templates for the milter, but I think it's probably better to have a clean upgrade path than to wait for better language at this point. We should also start thinking about volatile - I'll take a look at what can be cherry-picked onto that branch. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] dlopen/libclamavunrar_iface in 0.95
This one time, at band camp, Michael Tautschnig said: Hi all, According to https://wiki.clamav.net/Main/UpgradeNotes095 upstream has decided to include dlopen support in ClamAV. If I read the instruction correctly, this still means that we should use --disable-unrar when building the package and only our users may themselves enable that, install libclamavunrar_iface.so and it will be all good. Is that correct? Yes - the problem is that the unrar license isn't compatible with the GPL, so we can't ship linked objects that result from codebases under the two licenses, as I understand it. If I'm wrong and we need to ship libclamavunrar_iface.so (the license would allow us to do so), we'll need to tweak the libclamav/Makefile.am a little bit because it only allows to build all of the unrar stuff or nothing at the moment. No big deal, but I just don't want to do that if it turns out not be necessary. No, I don't think so. I'm also planning to see what needs to be done to build the unrar stuff out of tree and see if I can get upstream to take the patch. I'm batting fairly low recently, but it's worth a shot. Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
Re: [Pkg-clamav-devel] Clamav in stable
This one time, at band camp, Bjoern Meier said: Hi, Stephen Gran wrote: This one time, at band camp, Bjoern Meier said: hi, I've installed a fresh Debian Etch to test clamav. Could it be, that there a two bugs?: I think they are the same problem, see below. - freshclam seems to hang if you want to update the sigs - if you use postfix with amavis the email keeps in queue and clamav-scan hangs with 100% cpu usage. The version of clamav in etch has a very hard time loading signatures of a certain type that came into use after the release of etch. freshclam will try to load and validate the signtures, which is why it seems to hang for a long time. Also, I am guessing that you're using clamscan with amavis (not clamdscan), which will suffer the same problem. I highly recommend using the packages of clamav available from http://volatile.debian.org/ Cheers, well, I use volatile. But I have a hard discussion with Peer Heinlein (maybe you know him, if not he had wrote some very good books about LPI and Postfix), he says (on a public lists) that the pakage is NOT working and I must agree. So I hoped we could bring something on the way. I'd prefer to keep replies on list, if that's ok with you. Are you using 3rd party signatures (sanesecurity, etc)? It's working just fine for me, and judging by the lack of bug reports saying it's not working, I have to assume it works for most other people as well. Can you provide more information? -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#512776: status with upstream
tags 512776 +upstream tags 512776 +forwarded clamav-de...@lists.clamav.net thanks http://lurker.clamav.net/thread/20090127.134314.108bdbc6.en.html Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#511688: Bug#511688: /etc/init.d/clamav-milter stop doesn't stop the clamav-milter daemon
This one time, at band camp, Bruno Tréguier said: The script /etc/init.d/clamav-milter doesn't do a proper job when trying to stop the daemon. This is due to the fact that the file containing the PID (/var/run/clamav/clamav-milter.pid) in fact holds the process group ID, which is negative, and line 88 of the script, which is supposed to kill the daemon, is as follows: kill -15 -$PID 2/dev/null || true The minus sign before $PID shouldn't be there, as it is already included in the PID contained in the /var/run/clamav/clamav-milter.pid file. That line should read: kill -15 $PID 2/dev/null || true Hope that helps, and please be indulgent about the rather free form of my patch (it's only 1 line anyway ;-) ). If you look at how PID is defined, the leading '-' is stripped off before it gets to that point (or should be). Can you provide the output of sh -x /etc/init.d/clamav-milter stop on a run that fails to stop it? Cheers, -- - | ,''`.Stephen Gran | | : :' :sg...@debian.org | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
[Pkg-clamav-devel] Bug#507132: Bug#507132: FW by linux4miche...@tamay-dogan.net : Re: Bug#507132: Bug#507132: connection errors
This one time, at band camp, Michelle Konzack said: Errors were encountered while processing: davfs2 E: Sub-process /usr/bin/dpkg returned an error code (1) samba3:~# freshclam --list-mirrors Can't read mirrors.dat It has only downloaded 30% of main.vcd and then unexpected toped... And then it can not fine mirrors.dat. mirrors.dat is a cache file. --list-mirrors isn't useful if you haven't been running freshclam. A few other things are clearly wrong on your system as well. I don't know if other packages blowing up during configure runs are preventing clamav and related packages from becoming fully configured - the maintainer scripts actually do a fair amount of setup, and if they don't get run, it wouldn't surprise me if something else goes wrong. samba3:~# mkdir /tmp/clamav samba3:~# freshclam -v --datadir=/tmp/clamav ERROR: getfile: Can't create new file /tmp/clamav/clamav-46b42bd66e179ece05d2028108be59db in /tmp/clamav Hint: The database directory must be writable for UID 107 or GID 106 WARNING: Can't download main.cvd from db.local.clamav.net I think you can figure out what to do there. When it stopped downloading at 30%, it's not because you ran out of disk space or something, is it? It sounds like that's either network slowdown or ENOSPSC type issues to me, but we'll see. I have attached a compressed 4 MByte tcpdump from the installation to now... Which shows a completely normal http download. I was looking into the dump, but understand nothing... ...except, that if I go to the DNS http://static.88-198-17-100.clients.your-server.de/ I am redirected to http://www.julispace.com/ And realy, I do not like unknown connections to private servers... I do not understand, WHY clamav is connecting to this server... what are you talking about? You're upset because someone who hosts a mirror for clamav data also hosts another website on the same IP? My God, the horror. And again, let's try to stay on topic. We're nearly there - we've got a tcpdump showing a completely normal download of data, and we've got lots of evidence that your system is (mis)configured in lots of interesting ways. I'm really starting to lean towards 'not a bug' myself, but let's keep on looking for now. Cheers, -- - | ,''`.Stephen Gran | | : :' :[EMAIL PROTECTED] | | `. `'Debian user, admin, and developer | |`- http://www.debian.org | - signature.asc Description: Digital signature ___ Pkg-clamav-devel mailing list Pkg-clamav-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
