That looks like the same issue we've got wth clamd 0.96 and MailScanner: http://thread.gmane.org/gmane.mail.virus.mailscanner/74234
Cheers, Phil -- Phil Randal | Networks Engineer NHS Herefordshire & Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -----Original Message----- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Philippe Camps Sent: 15 April 2010 15:19 To: clamav-users@lists.clamav.net Subject: Re: [Clamav-users] vscan-clamav samba with new redHat 5.5 I reboot the server with the new kernel, and then rebuild the vscan-clamav.so module and upgrade clamav.0.95.3 to clamav.0.96. I have no errors when I start clamav. I put the debug yes in clamd.conf. I put a file test.txt in my samba share folder, and I notice always the same error: /Apr 15 15:10:16 spinel clamd[23749]: THRMGR: queue (bulk) crossed low threshold -> signaling Apr 15 15:10:17 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:17 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:39 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:40 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:40 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File test.txt not found! Not scanned! Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:10:50 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned Apr 15 15:11:04 spinel smbd_vscan-clamav[29088]: INFO: Scanning file : './/test.txt' Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 4 Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 4 Apr 15 15:11:04 spinel clamd[23749]: Got new connection, FD 9 Apr 15 15:11:04 spinel clamd[23749]: Got new connection, FD 9 Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 5 Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 5 Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 5 seconds Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 5 seconds Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 9 Apr 15 15:11:04 spinel clamd[23749]: Received POLLIN|POLLHUP on fd 9 Apr 15 15:11:04 spinel clamd[23749]: got command SCAN .//test.txt (16, 5), argument: .//test.txt Apr 15 15:11:04 spinel clamd[23749]: got command SCAN .//test.txt (16, 5), argument: .//test.txt Apr 15 15:11:04 spinel clamd[23749]: mode -> MODE_WAITREPLY Apr 15 15:11:04 spinel clamd[23749]: mode -> MODE_WAITREPLY Apr 15 15:11:04 spinel clamd[23749]: Breaking command loop, mode is no longer MODE_COMMAND Apr 15 15:11:04 spinel clamd[23749]: Breaking command loop, mode is no longer MODE_COMMAND Apr 15 15:11:04 spinel clamd[23749]: Consumed entire command Apr 15 15:11:04 spinel clamd[23749]: Consumed entire command Apr 15 15:11:04 spinel clamd[23749]: Number of file descriptors polled: 1 fds Apr 15 15:11:04 spinel clamd[23749]: Number of file descriptors polled: 1 fds Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 600 seconds Apr 15 15:11:04 spinel clamd[23749]: fds_poll_recv: timeout after 600 seconds Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: lstat() failed on: .//test.txt Apr 15 15:11:04 spinel clamd[23749]: lstat() failed on: .//test.txt Apr 15 15:11:04 spinel smbd_vscan-clamav[29088]: ERROR: file .//test.txt not found, not readable or an error occured Apr 15 15:11:04 spinel clamd[23749]: Finished scanthread Apr 15 15:11:04 spinel clamd[23749]: Finished scanthread Apr 15 15:11:04 spinel clamd[23749]: Scanthread: connection shut down (FD 9) Apr 15 15:11:04 spinel clamd[23749]: Scanthread: connection shut down (FD 9) Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (single) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low threshold -> signaling Apr 15 15:11:04 spinel clamd[23749]: THRMGR: queue (bulk) crossed low threshold -> signaling Apr 15 15:11:05 spinel smbd_vscan-clamav[29088]: INFO: File . is a directory! Not scanned! Apr 15 15:11:05 spinel smbd_vscan-clamav[29088]: INFO: file .// was not modified - not scanned/ It seems that clamd can't read (/lstat() failed on: .//test.txt) /the file that vscan-clamav puts in the clamav socket. May someone tell me if it is a clamav problem or a vscan-clamav problem ? Le 02/04/2010 18:12, Philippe Camps a écrit : > Hi, > > I use samba-vscan 0.3.6c with samba-3.0.33-3.15.el5 on Red Hat 5.4. > Everything was working fine until the new update to Red Hat 5.5. > I have now samba-3.0.33-3.28.el5 and glibc-2.5-49. > > I have messages errors when I try to access a file with samba: > Apr 2 13:46:26 spinel smbd_vscan-clamav[20319]: INFO: file .// was > not modified - not scanned Apr 2 13:46:27 spinel > smbd_vscan-clamav[20319]: INFO: Scanning file : > './/Samba-HOWTO-Collection.pdf' > Apr 2 13:46:27 spinel smbd_vscan-clamav[20319]: ERROR: file > .//Samba-HOWTO-Collection.pdf not found, not readable or an error > occured Apr 2 13:46:27 spinel smbd_vscan-clamav[20319]: ERROR: daemon > failed with a minor error - access to file Samba-HOWTO-Collection.pdf > denied Apr 2 13:46:27 spinel clamd[20298]: lstat() failed on: > .//Samba-HOWTO-Collection.pdf > > So I get the new source of samba-3.0.33-3.28.el5.src.rpm and I rebuild > the vscan-clamav.so. > The buiding is OK and I put it in /usr/lib64/samba/vfs. > > My samba config is: > /etc/samba/smb.conf: > > [homes] > / comment = Home Directories > path = /users/%u > browseable = no > writable = yes > valid users = %S > create mask = 0644 > directory mask = 0751 > wide links = no > # vscan-clamav protect > vfs objects = vscan-clamav > vscan-clamav: config-file = /etc/samba/vscan-clamav.conf/ > > /etc/samba/vscan-clamav.conf: > > [samba-vscan] > > /max file size = 0 > verbose file logging = yes > scan on close = yes > deny access on error = no > deny access on minor error = yes > # deny access on minor error = no > send warning message = yes > infected file action = quarantine > quarantine prefix = vir- > max lru files entries = 100 > lru file entry lifetime = 5 > exclude file types = > exclude file regexp = > clamd socket name = /var/lib/clamav/clamd.socket ;scan archives = yes > libclamav max files in archive = 1000 libclamav max archived file size > = 10485760 libclamav max recursion level = 5/ > > I have clamd ClamAV 0.95.3 with the same socket: > /LocalSocket /var/lib/clamav/clamd.socket/ and clamd daemon is running > with root (not clamav user) > > The clamscan is OK. > > I really don't understand why vscan-clamav can't access to files with > the last Red Hat ? > Is it a problem with the new glibc ? > Is vscan-clamav again supported ? > > Thank you very much for your help > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit > http://wiki.clamav.net http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
