Jim Maul wrote:
Jamie Saunders wrote:
I've confirmed that clamav is running as qscand and is accessing the normal .cvd database files. I remembered looking into a module for PHP that utilised the clamav api called, surprisingly enough, php-clamav <http://freshmeat.net/projects/php-clam/>. I'm assuming this module was compiled against an older version of clamav which uses the .db files. If this is the cause of the mysterious temp files I don't want to simply disable the module as it's been used in a webmail PHP script. However, I'm still no nearer to undestanding why these files are appearing in /tmp, where they're coming from and why they aren't being removed.
Well that would explain why they are owned by apache. I tried checking out the link to php-clam you posted but the homepage (http://software.fotopic.net/) has no mention whatsoever about php-clam and there isnt a whole lot of info on the freshmeat page so its difficult to find out why this is happening. Regardless, i dont believe its anything related to clamav directly. Is there a php-clam list somewhere?
-Jim _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
I agree, I was pretty certain this problem was related to the php module, and now it seems we were right. I sent an e-mail to the address on the freshmeat site and this is the reply I received (very quickly I might add):
"I did wonder if this'd be an issue tbh.
Basically, libclamav shuffles things over to /tmp for some reason (not 100% sure why). I'll email the clamav dev team and see what they can suggest.
For now, you may want to add a crontab line that does a find over /tmp for any files older than say 2-3 days and rm's them. Bit of a hack, I know - but until I work out the "right" way to cure this, it'll be best to hack it."
This was obviously an oversight by a developer somewhere along the line, I'm hoping they can come up with a fix. Thanks for your help Jim.
Jamie _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
