I found the problem, but I am not sure why it is a problem. I add "<&-" to the end of all services that I start to keep ssh from hanging on open file descriptors. This makes clamav unhappy (though not anything else). Using </dev/null instead works.
Clamav is doing something presumptuous with file descriptors. Just FYI... Brian ====================================================================== truss -afp <clamd pid> 27223: signotifywait() = 1 27223: lwp_sigredirect(1, SIGHUP, 0xFFFFFFFF7C80FA2C) = 0 27223: Received signal #1, SIGHUP, in accept() [caught] 27223: siginfo: SIGHUP pid=27343 uid=0 27223: accept(0, 0x00000000, 0x00000000, 1) Err#4 EINTR 27223: sigprocmask(SIG_SETMASK, 0xFFFFFFFF7DE21ED8, 0x00000000) = 0 27223: sigprocmask(SIG_SETMASK, 0xFFFFFFFF7DE31E50, 0x00000000) = 0 27223: setcontext(0xFFFFFFFF7FFFE1E0) 27223: time() = 1131479800 27223: stat("/var/clamav/clamd.log", 0xFFFFFFFF7FFFE580) = 0 27223: write(0, " T u e N o v 8 1".., 64) Err#134 ENOTCONN 27223: close(0) = 0 27223: time() = 1131479800 27223: accept(0, 0x00000000, 0x00000000, 1) Err#9 EBADF 27223: umask(037) = 0 27223: open("/var/clamav/clamd.log", O_WRONLY|O_APPEND|O_CREAT, 0666) = 0 27223: lseek(0, 0, SEEK_END) = 425 27223: umask(0) = 037 27223: time() = 1131479800 27223: ioctl(0, TCGETA, 0xFFFFFFFF7FFFD34C) Err#25 ENOTTY 27223: fstat(0, 0xFFFFFFFF7FFFD410) = 0 27223: stat("/var/clamav/clamd.log", 0xFFFFFFFF7FFFE580) = 0 27223: write(0, " T u e N o v 8 1".., 51) = 51 27223: accept(0, 0x00000000, 0x00000000, 1) Err#95 ENOTSOCK 27223: time() = 1131479800 27223: stat("/var/clamav/clamd.log", 0xFFFFFFFF7FFFE580) = 0 27223: write(0, " T u e N o v 8 1".., 51) = 51 _______________________________________________ http://lurker.clamav.net/list/clamav-users.html