I reboot the server with the new kernel, and then rebuild the
vscan-clamav.so module and upgrade clamav.0.95.3 to clamav.0.96.
I have no errors when I start clamav.
I put the debug yes in clamd.conf.
I put a file test.txt in my samba share folder, and I notice always the
same error:
/Apr 15 15:10:16 spinel clamd[23749]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 15 15:10:17 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:17 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:40 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:40 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File test.txt not
found! Not scanned!
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned
Apr 15 15:11:04 spinel smbd_vscan-clamav[29088]: INFO: Scanning file :
'.//test.txt'
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 4
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 4
Apr 15 15:11:04 spinel clamd[23749]: Got new connection, FD 9
Apr 15 15:11:04 spinel clamd[23749]: Got new connection, FD 9
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 5
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 5
Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 5 seconds
Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 5 seconds
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 9
Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 9
Apr 15 15:11:04 spinel clamd[23749]: got command SCAN .//test.txt (16,
5), argument: .//test.txt
Apr 15 15:11:04 spinel clamd[23749]: got command SCAN .//test.txt (16,
5), argument: .//test.txt
Apr 15 15:11:04 spinel clamd[23749]: mode -> MODE_WAITREPLY
Apr 15 15:11:04 spinel clamd[23749]: mode -> MODE_WAITREPLY
Apr 15 15:11:04 spinel clamd[23749]: Breaking command loop, mode is no
longer MODE_COMMAND
Apr 15 15:11:04 spinel clamd[23749]: Breaking command loop, mode is no
longer MODE_COMMAND
Apr 15 15:11:04 spinel clamd[23749]: Consumed entire command
Apr 15 15:11:04 spinel clamd[23749]: Consumed entire command
Apr 15 15:11:04 spinel clamd[23749]: Number of file descriptors polled:
1 fds
Apr 15 15:11:04 spinel clamd[23749]: Number of file descriptors polled:
1 fds
Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 600
seconds
Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 600
seconds
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: lstat() failed on: .//test.txt
Apr 15 15:11:04 spinel clamd[23749]: lstat() failed on: .//test.txt
Apr 15 15:11:04 spinel smbd_vscan-clamav[29088]: ERROR: file .//test.txt
not found, not readable or an error occured
Apr 15 15:11:04 spinel clamd[23749]: Finished scanthread
Apr 15 15:11:04 spinel clamd[23749]: Finished scanthread
Apr 15 15:11:04 spinel clamd[23749]: Scanthread: connection shut down (FD 9)
Apr 15 15:11:04 spinel clamd[23749]: Scanthread: connection shut down (FD 9)
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 15 15:11:05 spinel smbd_vscan-clamav[29088]: INFO: File . is a
directory! Not scanned!
Apr 15 15:11:05 spinel smbd_vscan-clamav[29088]: INFO: file .// was not
modified - not scanned/
It seems that clamd can't read (/lstat() failed on: .//test.txt) /the
file that vscan-clamav puts in the clamav socket.
May someone tell me if it is a clamav problem or a vscan-clamav problem ?
Le 02/04/2010 18:12, Philippe Camps a écrit :
Hi,
I use samba-vscan 0.3.6c with samba-3.0.33-3.15.el5 on Red Hat 5.4.
Everything was working fine until the new update to Red Hat 5.5.
I have now samba-3.0.33-3.28.el5 and glibc-2.5-49.
I have messages errors when I try to access a file with samba:
Apr 2 13:46:26 spinel smbd_vscan-clamav[20319]: INFO: file .// was
not modified - not scanned
Apr 2 13:46:27 spinel smbd_vscan-clamav[20319]: INFO: Scanning file :
'.//Samba-HOWTO-Collection.pdf'
Apr 2 13:46:27 spinel smbd_vscan-clamav[20319]: ERROR: file
.//Samba-HOWTO-Collection.pdf not found, not readable or an error occured
Apr 2 13:46:27 spinel smbd_vscan-clamav[20319]: ERROR: daemon failed
with a minor error - access to file Samba-HOWTO-Collection.pdf denied
Apr 2 13:46:27 spinel clamd[20298]: lstat() failed on:
.//Samba-HOWTO-Collection.pdf
So I get the new source of samba-3.0.33-3.28.el5.src.rpm and I rebuild
the vscan-clamav.so.
The buiding is OK and I put it in /usr/lib64/samba/vfs.
My samba config is:
/etc/samba/smb.conf:
[homes]
/ comment = Home Directories
path = /users/%u
browseable = no
writable = yes
valid users = %S
create mask = 0644
directory mask = 0751
wide links = no
# vscan-clamav protect
vfs objects = vscan-clamav
vscan-clamav: config-file = /etc/samba/vscan-clamav.conf/
/etc/samba/vscan-clamav.conf:
[samba-vscan]
/max file size = 0
verbose file logging = yes
scan on close = yes
deny access on error = no
deny access on minor error = yes
# deny access on minor error = no
send warning message = yes
infected file action = quarantine
quarantine prefix = vir-
max lru files entries = 100
lru file entry lifetime = 5
exclude file types =
exclude file regexp =
clamd socket name = /var/lib/clamav/clamd.socket
;scan archives = yes
libclamav max files in archive = 1000
libclamav max archived file size = 10485760
libclamav max recursion level = 5/
I have clamd ClamAV 0.95.3 with the same socket:
/LocalSocket /var/lib/clamav/clamd.socket/
and clamd daemon is running with root (not clamav user)
The clamscan is OK.
I really don't understand why vscan-clamav can't access to files with
the last Red Hat ?
Is it a problem with the new glibc ?
Is vscan-clamav again supported ?
Thank you very much for your help
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
