Jim Maul wrote:
Jamie Saunders wrote:
Jim Maul wrote:
Jamie Saunders wrote:
Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 9. Everything's working fine except that clamav is taking up all disk space on '/tmp with it's temporary database update files. As soon as '/tmp' is full it cannot download any more updates and spits out an error which prevents qmail from delivering any mail. I've currently setup a daily cron job to clear out all clamav-* folders on '/tmp', but I'm hoping there's a way of changing how clamav handles temporary files in it's configuration. Any help much appreciated.
Sounds like debugging is enabled.
-Jim _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Debugging is turned off in clamd.conf. Here is the directory structure of one of the clamav folders in /tmp:
clamav-e3b114abc93db32 | --- COPYING (17992) | --- main.db (3794792) | --- main.hdb (136626) | --- main.ndb (30528)
It looks to me like these are virus database files. They are all owned by the user 'apache' which seems a little strange to me.
Jamie
Virus database files would be owned by the user that freshclam is running as. So unless you are running clamav as 'apache' then i dont see how these tmp files could be created by clamav.
The other weird thing is that you should .db and .ndb files. Clamav doesnt use these files by default. In the more recent versions its using .cvd files.
Who is clamav running as? Did you compile clamav from source or did you use rpm, etc?
-Jim _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
I've confirmed that clamav is running as qscand and is accessing the normal .cvd database files. I remembered looking into a module for PHP that utilised the clamav api called, surprisingly enough, php-clamav <http://freshmeat.net/projects/php-clam/>. I'm assuming this module was compiled against an older version of clamav which uses the .db files. If this is the cause of the mysterious temp files I don't want to simply disable the module as it's been used in a webmail PHP script. However, I'm still no nearer to undestanding why these files are appearing in /tmp, where they're coming from and why they aren't being removed.
Jamie _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
