Hi there, On Tue, 10 Dec 2013, Scott Galambos wrote:
... I've noticed it only makes these files when not shutdown cleanly. If I properly do a kill -TERM first during a shutdown
Do your shutdown scripts not shut down your milters?
I don't get them anymore. But its definitely clamav-milter making them which should never happen. Even if my syslog-ng was messed up. writing to the root randomly like that is a bug.
Comparing my experience with yours, I've been running clamav-milter on five different mail servers for almost a decade. Despite occasionally messing up configurations of my own I've never seen this problem. The milter is also used by large numbers of mail system administrators all over the world and it seems unlikely that you've found a bug which all those other administrators have avoided, but it's possible. So the claim that clamav-milter is writing randomly to the filesystem (or, as you say, to the root, which is hardly random) needs to be justified. I still think you've done something daft in your configuration. One thing that would be daft is running clamav-milter as root, if indeed that's what you're doing. If you aren't, then it isn't clamav-milter that's writing into your root directory because it hasn't permission to do that. Or does it? My milters certainly don't... mail5:~$ >>> ps axufwwww | grep clamav clamav 19238 0.0 14.9 415932 388256 ? Ssl Jul29 158:51 /usr/local/sbin/clamd -c /etc/mail/clamav/clamd.conf clamav 19241 0.0 0.0 51400 680 ? Ssl Jul29 0:43 /usr/local/sbin/clamav-milter clamav 19245 0.0 0.0 3108 1068 ? Ss Jul29 128:08 /usr/local/bin/freshclam -d --datadir=/etc/mail/clamav --log=/var/log/freshclam.log ged 7927 0.0 0.0 3304 760 pts/0 S+ 12:16 0:00 \_ grep clamav So I have two questions: (1) what is the user that runs your clamav-milter, and (2) what are the permissions on your root directory? -- 73, Ged. _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
