----- Original Message -----
From: "John Fleming" <[EMAIL PROTECTED]>
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Sent: Thursday, March 15, 2007 10:31 PM
Subject: Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1
notfindingviruses
----- Original Message -----
From: "Dennis Peterson" <[EMAIL PROTECTED]>
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Sent: Thursday, March 15, 2007 8:58 PM
Subject: Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 not
findingviruses
John Fleming wrote:
- And the clamav log is free of errors and indicated that the database
is updated appropriately and clamd is being notified of changes.
OK, clamav is finding viruses again, but they are not being LOGGED in
/var/log/clamav.log. The database upgrades and any restarts ARE being
logged - just not the "FOUND <virusname>" that I'm used to. (Thus my
virus stats programs are no good.) The header of the infected emails
does have the FOUND <virusname> - just not the log. I've googled this
and found one suggetion to no avail. clamd.conf indicates the proper
path to the log and, again, some activity gets logged. Debian stable,
clamav 0.90.1 Calling with clamassassin 1.2.4 (latest update to work
with 0.90) Any more ideas or troubleshooting? Thanks - John
Are you using syslog to log clam entries or letting clamd do the logging?
clamd
If not syslog, then the the clamd run-as user have write permissions to
the log?
Yes, clamav:clamav both owner and group 0640
This -has- changed somewhere along the line with the upgrade to 0.90.1. I'm
certain clamav.log used to be owned by adm and group clamav. But I've
changed to those with no effect so put them back to their defaults as
installed.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
