[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Anyone seen this?



After successfully installing (or successfully removing and reinstalling from 
scratch!) clamav (all four packages), I get from 2nd day onwards:

/etc/cron.daily/clamav-data:
ERR: /usr/share/clamav-data/databasedate does not exist.
     This should not happen since that file is part of the
     clamav-data package.
run-parts: /etc/cron.daily/clamav-data exited with return code 1
/etc/cron.daily/smail:
expr: warning: unportable BRE: `^uid=0(root)': using `^' as the first 
character
of the basic regular expression is not portable; it is being ignored
checkerr:  ERROR:  you must be root to do this!

1. The databasedate is not located on /usr/share. There is no such file. The 
only such directory around is on /var/lib and it contains one empty file 
"warn-on-old-databases". The ERR message is all text and the file named might 
indeed be mistyped. The script is looking for something like this.

2. I could not fine the offending ^uid=0 in any of the conf files or bootup 
scripts form the clamav packages.

Aside from a few querky errors, the thing seems to be working! Here are the 
last three days of log entries for it:

Sun Mar  7 10:12:02 2004 -> SelfCheck: Database status OK.
Sun Mar  7 10:20:14 2004 -> Reading databases from /var/lib/clamav/
Sun Mar  7 10:20:16 2004 -> Database correctly reloaded (20397 viruses)
Sun Mar  7 11:12:14 2004 -> SelfCheck: Database status OK.
Sun Mar  7 12:12:24 2004 -> SelfCheck: Database status OK.
Sun Mar  7 12:51:11 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Sun Mar  7 12:51:11 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Sun Mar  7 12:51:11 2004 -> --- Stopped at Sun Mar  7 12:51:11 2004
Sun Mar  7 15:04:00 2004 -> +++ Started at Sun Mar  7 15:04:00 2004
Sun Mar  7 15:04:00 2004 -> Log file size limited to 1048576 bytes.
Sun Mar  7 15:04:00 2004 -> Reading databases from /var/lib/clamav/
Sun Mar  7 15:04:02 2004 -> Protecting against 20397 viruses.
Sun Mar  7 15:04:02 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Sun Mar  7 15:04:02 2004 -> Setting connection queue length to 15
Sun Mar  7 15:04:02 2004 -> Maximal number of threads: 12
Sun Mar  7 15:04:02 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Sun Mar  7 15:04:02 2004 -> Archive: Recursion level limit set to 5.
Sun Mar  7 15:04:02 2004 -> Archive: Files limit set to 1000.
Sun Mar  7 15:04:02 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Sun Mar  7 15:04:02 2004 -> Archive support enabled.
Sun Mar  7 15:04:02 2004 -> RAR support disabled.
Sun Mar  7 15:04:02 2004 -> Mail files support enabled.
Sun Mar  7 15:04:02 2004 -> Self checking every 3600 seconds.
Sun Mar  7 15:04:02 2004 -> Timeout set to 180 seconds.
Sun Mar  7 15:04:02 2004 -> SelfCheck: Database status OK.
Sun Mar  7 15:50:59 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Sun Mar  7 15:50:59 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Sun Mar  7 15:50:59 2004 -> --- Stopped at Sun Mar  7 15:50:59 2004
Mon Mar  8 10:49:47 2004 -> +++ Started at Mon Mar  8 10:49:47 2004
Mon Mar  8 10:49:47 2004 -> Log file size limited to 1048576 bytes.
Mon Mar  8 10:49:47 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 10:49:49 2004 -> Protecting against 20397 viruses.
Mon Mar  8 10:49:49 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Mon Mar  8 10:49:49 2004 -> Setting connection queue length to 15
Mon Mar  8 10:49:49 2004 -> Maximal number of threads: 12
Mon Mar  8 10:49:49 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Mon Mar  8 10:49:49 2004 -> Archive: Recursion level limit set to 5.
Mon Mar  8 10:49:49 2004 -> Archive: Files limit set to 1000.
Mon Mar  8 10:49:49 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Mon Mar  8 10:49:49 2004 -> Archive support enabled.
Mon Mar  8 10:49:49 2004 -> RAR support disabled.
Mon Mar  8 10:49:49 2004 -> Mail files support enabled.
Mon Mar  8 10:49:49 2004 -> Self checking every 3600 seconds.
Mon Mar  8 10:49:49 2004 -> Timeout set to 180 seconds.
Mon Mar  8 10:49:49 2004 -> SelfCheck: Database status OK.
Mon Mar  8 11:49:59 2004 -> SelfCheck: Database status OK.
Mon Mar  8 12:08:07 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 12:08:09 2004 -> Database correctly reloaded (20401 viruses)
Mon Mar  8 12:50:09 2004 -> SelfCheck: Database status OK.
Mon Mar  8 13:50:16 2004 -> SelfCheck: Database status OK.
Mon Mar  8 13:59:36 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Mon Mar  8 13:59:36 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Mon Mar  8 13:59:36 2004 -> --- Stopped at Mon Mar  8 13:59:36 2004
Mon Mar  8 14:00:46 2004 -> +++ Started at 2004-03-08 14:00:46
Mon Mar  8 14:00:46 2004 -> Log file size limited to 1048576 bytes.
Mon Mar  8 14:00:46 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 14:00:47 2004 -> Protecting against 20401 viruses.
Mon Mar  8 14:00:48 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Mon Mar  8 14:00:48 2004 -> Setting connection queue length to 15
Mon Mar  8 14:00:48 2004 -> Maximal number of threads: 12
Mon Mar  8 14:00:48 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Mon Mar  8 14:00:48 2004 -> Archive: Recursion level limit set to 5.
Mon Mar  8 14:00:48 2004 -> Archive: Files limit set to 1000.
Mon Mar  8 14:00:48 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Mon Mar  8 14:00:48 2004 -> Archive support enabled.
Mon Mar  8 14:00:48 2004 -> RAR support disabled.
Mon Mar  8 14:00:48 2004 -> Mail files support enabled.
Mon Mar  8 14:00:48 2004 -> OLE2 support disabled.
Mon Mar  8 14:00:48 2004 -> Self checking every 3600 seconds.
Mon Mar  8 14:00:48 2004 -> Timeout set to 180 seconds.
Mon Mar  8 14:00:48 2004 -> SelfCheck: Database status OK.
Mon Mar  8 14:37:05 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 14:37:06 2004 -> Database correctly reloaded (20403 viruses)
Mon Mar  8 14:45:04 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Mon Mar  8 14:45:04 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Mon Mar  8 14:45:04 2004 -> --- Stopped at Mon Mar  8 14:45:04 2004
Mon Mar  8 14:46:23 2004 -> +++ Started at 2004-03-08 14:46:23
Mon Mar  8 14:46:23 2004 -> Log file size limited to 1048576 bytes.
Mon Mar  8 14:46:23 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 14:46:24 2004 -> Protecting against 20403 viruses.
Mon Mar  8 14:46:25 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Mon Mar  8 14:46:25 2004 -> Setting connection queue length to 15
Mon Mar  8 14:46:25 2004 -> Maximal number of threads: 12
Mon Mar  8 14:46:25 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Mon Mar  8 14:46:25 2004 -> Archive: Recursion level limit set to 5.
Mon Mar  8 14:46:25 2004 -> Archive: Files limit set to 1000.
Mon Mar  8 14:46:25 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Mon Mar  8 14:46:25 2004 -> Archive support enabled.
Mon Mar  8 14:46:25 2004 -> RAR support disabled.
Mon Mar  8 14:46:25 2004 -> Mail files support enabled.
Mon Mar  8 14:46:25 2004 -> OLE2 support disabled.
Mon Mar  8 14:46:25 2004 -> Self checking every 3600 seconds.
Mon Mar  8 14:46:25 2004 -> Timeout set to 180 seconds.
Mon Mar  8 14:46:25 2004 -> SelfCheck: Database status OK.
Mon Mar  8 15:46:36 2004 -> SelfCheck: Database status OK.
Mon Mar  8 16:21:11 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Mon Mar  8 16:21:11 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Mon Mar  8 16:21:11 2004 -> --- Stopped at Mon Mar  8 16:21:11 2004
Mon Mar  8 21:27:19 2004 -> +++ Started at 2004-03-08 21:27:19
Mon Mar  8 21:27:19 2004 -> Log file size limited to 1048576 bytes.
Mon Mar  8 21:27:19 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 21:27:21 2004 -> Protecting against 20403 viruses.
Mon Mar  8 21:27:21 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Mon Mar  8 21:27:21 2004 -> Setting connection queue length to 15
Mon Mar  8 21:27:21 2004 -> Maximal number of threads: 12
Mon Mar  8 21:27:21 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Mon Mar  8 21:27:21 2004 -> Archive: Recursion level limit set to 5.
Mon Mar  8 21:27:21 2004 -> Archive: Files limit set to 1000.
Mon Mar  8 21:27:21 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Mon Mar  8 21:27:21 2004 -> Archive support enabled.
Mon Mar  8 21:27:21 2004 -> RAR support disabled.
Mon Mar  8 21:27:21 2004 -> Mail files support enabled.
Mon Mar  8 21:27:21 2004 -> OLE2 support disabled.
Mon Mar  8 21:27:21 2004 -> Self checking every 3600 seconds.
Mon Mar  8 21:27:21 2004 -> Timeout set to 180 seconds.
Mon Mar  8 21:27:21 2004 -> SelfCheck: Database status OK.
Mon Mar  8 21:29:47 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Mon Mar  8 21:29:47 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Mon Mar  8 21:29:47 2004 -> --- Stopped at Mon Mar  8 21:29:47 2004
Mon Mar  8 21:31:03 2004 -> +++ Started at 2004-03-08 21:31:03
Mon Mar  8 21:31:03 2004 -> Log file size limited to 1048576 bytes.
Mon Mar  8 21:31:03 2004 -> Reading databases from /var/lib/clamav/
Mon Mar  8 21:31:04 2004 -> Protecting against 20403 viruses.
Mon Mar  8 21:31:05 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Mon Mar  8 21:31:05 2004 -> Setting connection queue length to 15
Mon Mar  8 21:31:05 2004 -> Maximal number of threads: 12
Mon Mar  8 21:31:05 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Mon Mar  8 21:31:05 2004 -> Archive: Recursion level limit set to 5.
Mon Mar  8 21:31:05 2004 -> Archive: Files limit set to 1000.
Mon Mar  8 21:31:05 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Mon Mar  8 21:31:05 2004 -> Archive support enabled.
Mon Mar  8 21:31:05 2004 -> RAR support disabled.
Mon Mar  8 21:31:05 2004 -> Mail files support enabled.
Mon Mar  8 21:31:05 2004 -> OLE2 support disabled.
Mon Mar  8 21:31:05 2004 -> Self checking every 3600 seconds.
Mon Mar  8 21:31:05 2004 -> Timeout set to 180 seconds.
Mon Mar  8 21:31:05 2004 -> SelfCheck: Database status OK.
Mon Mar  8 22:31:16 2004 -> SelfCheck: Database status OK.
Mon Mar  8 23:07:20 2004 -> ERROR: Can't unlink the socket 
file /var/run/clamav/clamd.ctl
Mon Mar  8 23:07:20 2004 -> ERROR: Can't unlink the pid 
file /var/run/clamav/clamd.pid
Mon Mar  8 23:07:20 2004 -> --- Stopped at Mon Mar  8 23:07:20 2004
Tue Mar  9 09:14:26 2004 -> +++ Started at 2004-03-09 09:14:26
Tue Mar  9 09:14:26 2004 -> Log file size limited to 1048576 bytes.
Tue Mar  9 09:14:26 2004 -> Reading databases from /var/lib/clamav/
Tue Mar  9 09:14:27 2004 -> Protecting against 20403 viruses.
Tue Mar  9 09:14:28 2004 -> Unix socket file /var/run/clamav/clamd.ctl
Tue Mar  9 09:14:28 2004 -> Setting connection queue length to 15
Tue Mar  9 09:14:28 2004 -> Maximal number of threads: 12
Tue Mar  9 09:14:28 2004 -> Archive: Archived file size limit set to 10485760 
bytes.
Tue Mar  9 09:14:28 2004 -> Archive: Recursion level limit set to 5.
Tue Mar  9 09:14:28 2004 -> Archive: Files limit set to 1000.
Tue Mar  9 09:14:28 2004 -> WARNING: USING HARDCODED LIMIT: Archive: 
Compression ratio limit set to 200.
Tue Mar  9 09:14:28 2004 -> Archive support enabled.
Tue Mar  9 09:14:28 2004 -> RAR support disabled.
Tue Mar  9 09:14:28 2004 -> Mail files support enabled.
Tue Mar  9 09:14:28 2004 -> OLE2 support disabled.
Tue Mar  9 09:14:28 2004 -> Self checking every 3600 seconds.
Tue Mar  9 09:14:28 2004 -> Timeout set to 180 seconds.
Tue Mar  9 09:14:28 2004 -> SelfCheck: Database status OK.
Tue Mar  9 10:14:39 2004 -> SelfCheck: Database status OK.

The two offending files are not unlinked but, I assume overwritten each day:
/var/run/clamav# ls -l
total 4
srwxrwxrwx    1 root     root            0 2004-03-09 09:14 clamd.ctl
-rw-rw----    1 root     root            4 2004-03-09 09:14 clamd.pid



Reply to: