View Source: ClamAvNotes - Waikato Linux Users Group

Edit PageHistory Diff Info LikePages

!!! <tt>clamd</tt> dies at morning maintenance, Debian Woody (0.60-10, backported)

Sometimes, <tt>clamd</tt> dies during its morning maintenance. I've not found any rhyme or reason to this, however it's a pain for me as I use exim4 + exiscan, and this will stop delivering mail if it can't talk to its [Virus]scanner. My current workaround: A crontab(5) script that checks to see if the socket is writeable, and stops and starts <tt>clamd</tt> if not.

<verbatim>
# cat /etc/cron.d/check-clamd
TESTFILE="/var/run/clamd.ctl"

* * * * * root [ -w $TESTFILE ] || \
        (/etc/init.d/clamav-daemon stop; \
        /etc/init.d/clamav-daemon start)
</verbatim>


I know this isn't the prettiest, but I don't have time to track down ''why'' its dying just yet. -- DanielLawson

A similar script is available at http://mikecathey.com/code/clamdwatch/ and in the <tt>contrib/clamdwatch</tt> directory.

!!! <tt>clamdscan</tt> can't read files (when run from Amavis or some other scanner)

<verbatim>
Jun  9 10:21:02 firewall amavis[17934]: (17934-02) Clam Antivirus-clamd FAILED -
unknown status: /var/lib/amavis/amavis-msg-id/parts: Can't access the file ERROR
</verbatim>

[ClamAV] runs as the <tt>clamav</tt> user (on [Debian]/Woody anyway), and when Amavis unpacks its email for scanning as the <tt>amavis</tt> user.  Add <tt>clamav</tt> to the <tt>amavis</tt> group, and restart <tt>clamd</tt>.

Another way around this is to run <tt>clamd</tt> and <tt>amavis</tt> as the same user.  Apparently this change needs to be made for Conectiva Linux.

This worked on [Debian] with Exim4-daemon-heavy and clamav:

* Find the user [Exim] runs as using <tt>exim -bP exim_user</tt>, in my case <tt>Debian_exim</tt>.
* Edit <tt>/etc/clamav/clamav.conf</tt> to change its user to <tt>Debian_exim</tt>.
* Allow <tt>Debian_exim</tt> access to [ClamAV]'s files: <tt>adduser Debian_exim clamav</tt>
* Allow [ClamAV] to save its [PID] file: <tt>chmod g+w /var/run/clamav</tt>

----
CategoryMailNotes

One page links to ClamAvNotes:

ClamAV

The following authors of this page have not agreed to the WlugWikiLicense. As such copyright to all content on this page is retained by the original authors.

JorgeGodoy
MarcoVanDenHout

The following authors of this page have agreed to the WlugWikiLicense.

Last edited on Wednesday, July 6, 2005 9:37:19 pm by PhilMurray

Edit PageHistory Diff Info LikePages

PHP Warning