[Bug 487631] Re: clamdscan clamav-daemon error

2010-10-20 Thread Imre Gergely
Indeed. But you can't / shouldn't do that, because that would mean
ANYBODY could access those files, not just clamav-daemon. And that might
not be desirable :)

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2010-10-20 Thread Imre Gergely
Indeed. But you can't / shouldn't do that, because that would mean
ANYBODY could access those files, not just clamav-daemon. And that might
not be desirable :)

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2010-10-17 Thread Arvind S Raj
This might solve this problem: grant executable permissions to
thedirectory containing the files. clamdscan will be able to scan it-
tested this in maverick(10.10) and it works.

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2010-10-17 Thread Arvind S Raj
This might solve this problem: grant executable permissions to
thedirectory containing the files. clamdscan will be able to scan it-
tested this in maverick(10.10) and it works.

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-28 Thread Imre Gergely
I hope I understood correctly what you wanted to say above.

You shouldn't ever run clamav daemon as root.

How is your havp set up? By default havp uses the clamav library to scan
for viruses, and NOT clamav daemon. Maybe this is why it's working,
because it doesn't use clamav daemon.

Please check the permissions again:
1. run clamav daemon as clamav user (default)
2. copy a file to /tmp, make sure it has 0644 permissions (chmod 0644 
/tmp/eicar.txt)
3. try to scan it: clamdscan /tmp/eicar.txt

This should work, and if it does it means clamav daemon is working ok.

Now do this:
4. change the permissions to 0640, chown user:user /tmp/eicar.txt (where 
user is a non-root user you have on the system)
5. scan again: clamdscan /tmp/eicar.txt

This time it shouldn't work, it should give you that 'permission denied'
error.

Now try this:
6. usermod -a -G user clamav (where user is the above user's group)
7. restart clamav daemon, /etc/init.d/clamav-daemon restart (this is important)
8. scan again with clamdscan

This time it should work again.

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-25 Thread Jacekalex
This is not the wine itself is apparmor module:
 sudo apparmor_status | grep clam | wc -l
0

The error occurs regardless of - whether the apparmor module is loaded or not.
I tried also the Linux kernel from kernel.org - compiled without support for 
apparmor - was the same error.

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-25 Thread Imre Gergely
Ok, then check this: does the clamav daemon (which runs as clamav user
by default) have read access to the files you try to scan? When using
havp with clamav daemon, clamav user gets added to havp group, so it has
read access to havp's files.

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-25 Thread Jacekalex
The jaunty clamav-daemon - acting as user clamav scan all files via clamdscan 
properly
In Karmic clamav-daemon - acts only as a root user scan all files via clamdscan 
properly
When running as user clamav - nothing scans - are only the errors (if the scan 
is done by clamdscan)

Havp-proxy and clamdrip (thunderbird plugin) to work and function
correctly in both the Jaunty as well as Karmic

For now, i have no problem - I tested at home, but next week I start work at 
the mail server
 (Qmail + Dovecot) and there must be a virus scan - had to be clamav.
And now I wonder - if clamav-daemon running as root does not pose a threat to 
the system?

Jaunty program in clamav-daemon clamav user enough permissions - to work 
properly
in Karmic - clamav-daemon must have root permissions - why - I do not understand

And this situation is only - when the scanning is done by clamdscan.
Because I thought it was a mistake clamdscan - I do not know whether rightly.

And, finally, I do not know - whether in Jaunty was a mistake - that the user 
clamav has access to all files and clamav-daemon to work properly,
 whether Karmic is an error - because clamav user is not permitted to any file 
- and it must be user root to clamav-daemon to work properly.

This is where the error was - in Jaunty or Karmic?

Yours

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-25 Thread Jacekalex
Clamav-daemon runs as user clamav:
:~$ cat /etc/group | grep havp
havp:x:130:   # -  clamav is working 
properly
Scan through Clamdrip (thunderbird plugin)   -  clamav is working properly

Scan through clamdscan - incorrectly, only errors

Clamav daemon runs as root :
Everything is working properly, but clamav-daemon running as root, 
creating a gap in security (enough to exploit in file - which attack the 
clamav-daemon and the server has a problem).

Excuse me, I know little English:)

Yours

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Jacekalex

** Attachment added: clamdscan.log
   http://launchpadlibrarian.net/36023596/clamdscan.log

** Attachment added: Dependencies.txt
   http://launchpadlibrarian.net/36023597/Dependencies.txt

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Jacekalex
** Description changed:

  Binary package hint: clamav
  
  Hi
  
  I found an error in the clamav-daemon clamdscan client
  clamdscan is a client clamav-daemon
  
  This error is highly embarrassing for me - because it prevents the virus 
scanner operation Qmail-scanner 
  - which I installed in my Job as a hedge Qmail SMTP server.
  
  Clamdscan not working:
  r...@localhost:~/test# clamdscan eicar.txt
  /root/test/eicar.txt: lstat() failed: Permission denied. ERROR
  
  
  Clamav working properly, but it is not suitable to work with the clam-daemon 
and Qmail-scanner 
  - because after each completion of the work program of the virus database 
jestr it loaded again,
  which generates a very large load drive and very slow compared with the 
clam-daemon job: 
  
  r...@localhost:~/test# clamscan eicar.txt
  eicar.txt: Eicar-Test-Signature FOUND
  
  --- SCAN SUMMARY ---
  Known viruses: 657374
  Engine version: 0.95.3
  Scanned directories: 0
  Scanned files: 1
  Infected files: 1
  Data scanned: 0.00 MB
  Data read: 0.00 MB (ratio 0.00:1)
  Time: 1.954 sec (0 m 1 s)
  r...@localhost:~/test# 
  
+ Configuration file for clamav-daemon:
+ :~$ cat /etc/clamav/clamd.conf
+ AlgorithmicDetection true
+ AllowSupplementaryGroups true
+ ArchiveBlockEncrypted false
+ CommandReadTimeout 5
+ DatabaseDirectory /var/lib/clamav
+ Debug false
+ DetectBrokenExecutables false
+ DetectPUA false
+ ExitOnOOM false
+ FollowDirectorySymlinks false
+ FollowFileSymlinks true
+ Foreground false
+ HeuristicScanPrecedence true
+ IdleTimeout 30
+ LeaveTemporaryFiles false
+ LocalSocket /tmp/clamd.sock
+ LogClean false
+ LogFacility LOG_LOCAL6
+ LogFileMaxSize 0
+ LogFileUnlock false
+ LogFile /var/log/clamav/clamav.log
+ LogSyslog true
+ LogTime true
+ LogVerbose false
+ MailFollowURLs false
+ MaxConnectionQueueLength 15
+ MaxDirectoryRecursion 15
+ MaxQueue 100
+ MaxThreads 12
+ PhishingAlwaysBlockCloak false
+ PhishingAlwaysBlockSSLMismatch false
+ PhishingScanURLs true
+ PhishingSignatures true
+ PidFile /var/run/clamav/clamd.pid
+ ReadTimeout 180
+ ScanArchive true
+ ScanELF true
+ ScanHTML true
+ ScanMail true
+ ScanOLE2 true
+ ScanPDF true
+ ScanPE true
+ ScanPartialMessages false
+ SelfCheck 3600
+ SendBufTimeout 200
+ StreamMaxLength 10M
+ StructuredDataDetection false
+ TCPSocket 3310
+ User clamav
+ 
+ By contrast, havp the proxy server works with clamav-daemon properly:
+ 
+ Access to this site has been blocked
+ because it found the virus
+ ClamAV: EICAR-Test-Signature
+ Powered by HAVP
+ 
+ These symptoms appeared recently - did not occur in Ubuntu Jaunty with
+ the same configuration / etc / clamav / clamd.conf .
+ 
  
  Yours
  
  Further information - log strace program - in the attached file
  clamdscan.log
  
  ProblemType: Bug
  Architecture: i386
  Date: Tue Nov 24 16:12:13 2009
  DistroRelease: Ubuntu 9.10
  NonfreeKernelModules: nvidia
  Package: clamav-daemon 0.95.3+dfsg-1ubuntu0.09.10
  ProcEnviron:
   SHELL=/bin/bash
   PATH=(custom, no user)
   LANG=pl_PL.UTF-8
  ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
  SourcePackage: clamav
  Uname: Linux 2.6.31-15-generic i686
  XsessionErrors:
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (polkit-gnome-authentication-agent-1:17783): GLib-CRITICAL **: 
g_once_init_leave: assertion `initialization_value != 0' failed
   (nautilus:17774): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed
   (nautilus:17898): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Jacekalex
** Description changed:

  Binary package hint: clamav
  
  Hi
  
  I found an error in the clamav-daemon clamdscan client
  clamdscan is a client clamav-daemon
  
  This error is highly embarrassing for me - because it prevents the virus 
scanner operation Qmail-scanner 
  - which I installed in my Job as a hedge Qmail SMTP server.
  
  Clamdscan not working:
  r...@localhost:~/test# clamdscan eicar.txt
  /root/test/eicar.txt: lstat() failed: Permission denied. ERROR
  
+ The log / var / log / clamav / clamav.log appeared this message
+ Tue Nov 24 16:51:54 2009 - WARNING: lstat() failed on: /root/test/eicar.txt
+ 
+ The error appears only if - when the scanning is done by clamdscan
  
  Clamav working properly, but it is not suitable to work with the clam-daemon 
and Qmail-scanner 
  - because after each completion of the work program of the virus database 
jestr it loaded again,
  which generates a very large load drive and very slow compared with the 
clam-daemon job: 
  
  r...@localhost:~/test# clamscan eicar.txt
  eicar.txt: Eicar-Test-Signature FOUND
  
  --- SCAN SUMMARY ---
  Known viruses: 657374
  Engine version: 0.95.3
  Scanned directories: 0
  Scanned files: 1
  Infected files: 1
  Data scanned: 0.00 MB
  Data read: 0.00 MB (ratio 0.00:1)
  Time: 1.954 sec (0 m 1 s)
  r...@localhost:~/test# 
  
  Configuration file for clamav-daemon:
  :~$ cat /etc/clamav/clamd.conf
  AlgorithmicDetection true
  AllowSupplementaryGroups true
  ArchiveBlockEncrypted false
  CommandReadTimeout 5
  DatabaseDirectory /var/lib/clamav
  Debug false
  DetectBrokenExecutables false
  DetectPUA false
  ExitOnOOM false
  FollowDirectorySymlinks false
  FollowFileSymlinks true
  Foreground false
  HeuristicScanPrecedence true
  IdleTimeout 30
  LeaveTemporaryFiles false
  LocalSocket /tmp/clamd.sock
  LogClean false
  LogFacility LOG_LOCAL6
  LogFileMaxSize 0
  LogFileUnlock false
  LogFile /var/log/clamav/clamav.log
  LogSyslog true
  LogTime true
  LogVerbose false
  MailFollowURLs false
  MaxConnectionQueueLength 15
  MaxDirectoryRecursion 15
  MaxQueue 100
  MaxThreads 12
  PhishingAlwaysBlockCloak false
  PhishingAlwaysBlockSSLMismatch false
  PhishingScanURLs true
  PhishingSignatures true
  PidFile /var/run/clamav/clamd.pid
  ReadTimeout 180
  ScanArchive true
  ScanELF true
  ScanHTML true
  ScanMail true
  ScanOLE2 true
  ScanPDF true
  ScanPE true
  ScanPartialMessages false
  SelfCheck 3600
  SendBufTimeout 200
  StreamMaxLength 10M
  StructuredDataDetection false
  TCPSocket 3310
  User clamav
  
  By contrast, havp the proxy server works with clamav-daemon properly:
  
  Access to this site has been blocked
  because it found the virus
  ClamAV: EICAR-Test-Signature
  Powered by HAVP
  
  These symptoms appeared recently - did not occur in Ubuntu Jaunty with
  the same configuration / etc / clamav / clamd.conf .
  
  
  Yours
  
  Further information - log strace program - in the attached file
  clamdscan.log
  
  ProblemType: Bug
  Architecture: i386
  Date: Tue Nov 24 16:12:13 2009
  DistroRelease: Ubuntu 9.10
  NonfreeKernelModules: nvidia
  Package: clamav-daemon 0.95.3+dfsg-1ubuntu0.09.10
  ProcEnviron:
   SHELL=/bin/bash
   PATH=(custom, no user)
   LANG=pl_PL.UTF-8
  ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
  SourcePackage: clamav
  Uname: Linux 2.6.31-15-generic i686
  XsessionErrors:
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (polkit-gnome-authentication-agent-1:17783): GLib-CRITICAL **: 
g_once_init_leave: assertion `initialization_value != 0' failed
   (nautilus:17774): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed
   (nautilus:17898): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Jacekalex
** Description changed:

  Binary package hint: clamav
  
  Hi
  
  I found an error in the clamav-daemon clamdscan client
  clamdscan is a client clamav-daemon
  
  This error is highly embarrassing for me - because it prevents the virus 
scanner operation Qmail-scanner 
  - which I installed in my Job as a hedge Qmail SMTP server.
  
  Clamdscan not working:
  r...@localhost:~/test# clamdscan eicar.txt
  /root/test/eicar.txt: lstat() failed: Permission denied. ERROR
  
  The log / var / log / clamav / clamav.log appeared this message
  Tue Nov 24 16:51:54 2009 - WARNING: lstat() failed on: /root/test/eicar.txt
+ 
+ Permissions to socket is ok:
+ :~$ ls -l /tmp/clamd.sock
+ srwxrwxrwx 1 clamav clamav 0 2009-11-24 04:17 /tmp/clamd.sock
  
  The error appears only if - when the scanning is done by clamdscan
  
  Clamav working properly, but it is not suitable to work with the clam-daemon 
and Qmail-scanner 
  - because after each completion of the work program of the virus database 
jestr it loaded again,
  which generates a very large load drive and very slow compared with the 
clam-daemon job: 
  
  r...@localhost:~/test# clamscan eicar.txt
  eicar.txt: Eicar-Test-Signature FOUND
  
  --- SCAN SUMMARY ---
  Known viruses: 657374
  Engine version: 0.95.3
  Scanned directories: 0
  Scanned files: 1
  Infected files: 1
  Data scanned: 0.00 MB
  Data read: 0.00 MB (ratio 0.00:1)
  Time: 1.954 sec (0 m 1 s)
  r...@localhost:~/test# 
  
  Configuration file for clamav-daemon:
  :~$ cat /etc/clamav/clamd.conf
  AlgorithmicDetection true
  AllowSupplementaryGroups true
  ArchiveBlockEncrypted false
  CommandReadTimeout 5
  DatabaseDirectory /var/lib/clamav
  Debug false
  DetectBrokenExecutables false
  DetectPUA false
  ExitOnOOM false
  FollowDirectorySymlinks false
  FollowFileSymlinks true
  Foreground false
  HeuristicScanPrecedence true
  IdleTimeout 30
  LeaveTemporaryFiles false
  LocalSocket /tmp/clamd.sock
  LogClean false
  LogFacility LOG_LOCAL6
  LogFileMaxSize 0
  LogFileUnlock false
  LogFile /var/log/clamav/clamav.log
  LogSyslog true
  LogTime true
  LogVerbose false
  MailFollowURLs false
  MaxConnectionQueueLength 15
  MaxDirectoryRecursion 15
  MaxQueue 100
  MaxThreads 12
  PhishingAlwaysBlockCloak false
  PhishingAlwaysBlockSSLMismatch false
  PhishingScanURLs true
  PhishingSignatures true
  PidFile /var/run/clamav/clamd.pid
  ReadTimeout 180
  ScanArchive true
  ScanELF true
  ScanHTML true
  ScanMail true
  ScanOLE2 true
  ScanPDF true
  ScanPE true
  ScanPartialMessages false
  SelfCheck 3600
  SendBufTimeout 200
  StreamMaxLength 10M
  StructuredDataDetection false
  TCPSocket 3310
  User clamav
  
  By contrast, havp the proxy server works with clamav-daemon properly:
  
  Access to this site has been blocked
  because it found the virus
  ClamAV: EICAR-Test-Signature
  Powered by HAVP
  
  These symptoms appeared recently - did not occur in Ubuntu Jaunty with
  the same configuration / etc / clamav / clamd.conf .
  
  
  Yours
  
  Further information - log strace program - in the attached file
  clamdscan.log
  
  ProblemType: Bug
  Architecture: i386
  Date: Tue Nov 24 16:12:13 2009
  DistroRelease: Ubuntu 9.10
  NonfreeKernelModules: nvidia
  Package: clamav-daemon 0.95.3+dfsg-1ubuntu0.09.10
  ProcEnviron:
   SHELL=/bin/bash
   PATH=(custom, no user)
   LANG=pl_PL.UTF-8
  ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
  SourcePackage: clamav
  Uname: Linux 2.6.31-15-generic i686
  XsessionErrors:
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (polkit-gnome-authentication-agent-1:17783): GLib-CRITICAL **: 
g_once_init_leave: assertion `initialization_value != 0' failed
   (nautilus:17774): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed
   (nautilus:17898): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Jacekalex
** Description changed:

  Binary package hint: clamav
  
  Hi
  
  I found an error in the clamav-daemon clamdscan client
  clamdscan is a client clamav-daemon
  
  This error is highly embarrassing for me - because it prevents the virus 
scanner operation Qmail-scanner 
  - which I installed in my Job as a hedge Qmail SMTP server.
  
  Clamdscan not working:
  r...@localhost:~/test# clamdscan eicar.txt
  /root/test/eicar.txt: lstat() failed: Permission denied. ERROR
  
  The log / var / log / clamav / clamav.log appeared this message
  Tue Nov 24 16:51:54 2009 - WARNING: lstat() failed on: /root/test/eicar.txt
  
+ The error appears only if - when the scanning is done by clamdscan
+ 
  Permissions to socket is ok:
  :~$ ls -l /tmp/clamd.sock
  srwxrwxrwx 1 clamav clamav 0 2009-11-24 04:17 /tmp/clamd.sock
- 
- The error appears only if - when the scanning is done by clamdscan
  
  Clamav working properly, but it is not suitable to work with the clam-daemon 
and Qmail-scanner 
  - because after each completion of the work program of the virus database 
jestr it loaded again,
  which generates a very large load drive and very slow compared with the 
clam-daemon job: 
  
  r...@localhost:~/test# clamscan eicar.txt
  eicar.txt: Eicar-Test-Signature FOUND
  
  --- SCAN SUMMARY ---
  Known viruses: 657374
  Engine version: 0.95.3
  Scanned directories: 0
  Scanned files: 1
  Infected files: 1
  Data scanned: 0.00 MB
  Data read: 0.00 MB (ratio 0.00:1)
  Time: 1.954 sec (0 m 1 s)
  r...@localhost:~/test# 
  
  Configuration file for clamav-daemon:
  :~$ cat /etc/clamav/clamd.conf
  AlgorithmicDetection true
  AllowSupplementaryGroups true
  ArchiveBlockEncrypted false
  CommandReadTimeout 5
  DatabaseDirectory /var/lib/clamav
  Debug false
  DetectBrokenExecutables false
  DetectPUA false
  ExitOnOOM false
  FollowDirectorySymlinks false
  FollowFileSymlinks true
  Foreground false
  HeuristicScanPrecedence true
  IdleTimeout 30
  LeaveTemporaryFiles false
  LocalSocket /tmp/clamd.sock
  LogClean false
  LogFacility LOG_LOCAL6
  LogFileMaxSize 0
  LogFileUnlock false
  LogFile /var/log/clamav/clamav.log
  LogSyslog true
  LogTime true
  LogVerbose false
  MailFollowURLs false
  MaxConnectionQueueLength 15
  MaxDirectoryRecursion 15
  MaxQueue 100
  MaxThreads 12
  PhishingAlwaysBlockCloak false
  PhishingAlwaysBlockSSLMismatch false
  PhishingScanURLs true
  PhishingSignatures true
  PidFile /var/run/clamav/clamd.pid
  ReadTimeout 180
  ScanArchive true
  ScanELF true
  ScanHTML true
  ScanMail true
  ScanOLE2 true
  ScanPDF true
  ScanPE true
  ScanPartialMessages false
  SelfCheck 3600
  SendBufTimeout 200
  StreamMaxLength 10M
  StructuredDataDetection false
  TCPSocket 3310
  User clamav
  
  By contrast, havp the proxy server works with clamav-daemon properly:
  
  Access to this site has been blocked
  because it found the virus
  ClamAV: EICAR-Test-Signature
  Powered by HAVP
  
  These symptoms appeared recently - did not occur in Ubuntu Jaunty with
  the same configuration / etc / clamav / clamd.conf .
  
  
  Yours
  
  Further information - log strace program - in the attached file
  clamdscan.log
  
  ProblemType: Bug
  Architecture: i386
  Date: Tue Nov 24 16:12:13 2009
  DistroRelease: Ubuntu 9.10
  NonfreeKernelModules: nvidia
  Package: clamav-daemon 0.95.3+dfsg-1ubuntu0.09.10
  ProcEnviron:
   SHELL=/bin/bash
   PATH=(custom, no user)
   LANG=pl_PL.UTF-8
  ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
  SourcePackage: clamav
  Uname: Linux 2.6.31-15-generic i686
  XsessionErrors:
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (gnome-settings-daemon:17742): GLib-CRITICAL **: g_propagate_error: 
assertion `src != NULL' failed
   (polkit-gnome-authentication-agent-1:17783): GLib-CRITICAL **: 
g_once_init_leave: assertion `initialization_value != 0' failed
   (nautilus:17774): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed
   (nautilus:17898): Eel-CRITICAL **: eel_preferences_get_boolean: assertion 
`preferences_is_initialized ()' failed

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Scott Kitterman
This is covered in the apparmor section of
/usr/share/doc/clamav/README.Debian.gz (at the end).  You should update
your profile to authorize scanning where you need it to happen.  See
https://wiki.ubuntu.com/AppArmor and the linked pages for details.
/etc/apparmor.d/usr.sbin.clamd is the profile that needs to be modified
for your use case.

** Changed in: clamav (Ubuntu)
   Status: New = Invalid

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Imre Gergely
Hi

This is actually not a bug. Please see this bugreport to better
understand what's going on:

https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/450250

In short: clamdscan uses clamav-daemon to scan for files. When you run 
'clamdscan /path/to/file', in the background it just 'orders' clamav-daemon to 
open that file and scan it.
Because of Apparmor, clamav-daemon doesn't have the read permissions to open 
any file in any random directory. This _could_ be the problem in your case.

You may have to adjust clamav daemon's apparmor profile to give
permissions to qmail's temporary folders (in which the messages are
scanned). Look for apparmor messages in the logfile (usually you do a
grep for 'audit' in /var/log/messages).

Please update this bugreport if you have problems, I will mark it as
Incomplete for now.

** Changed in: clamav (Ubuntu)
   Status: Invalid = Incomplete

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 487631] Re: clamdscan clamav-daemon error

2009-11-24 Thread Scott Kitterman
** Changed in: clamav (Ubuntu)
   Status: Incomplete = Invalid

-- 
clamdscan clamav-daemon error
https://bugs.launchpad.net/bugs/487631
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs