I'm trying to setup ClamAV on a host running Apache and Phusion Passenger. After bringing up clamd and clamonacc, connecting to the Passenger app (web browser on 443) will result in various "Daemon failed to scan" and "Not a regular file ERROR" messages in the logs. It's not always the same file and seems to be differ every time the machine is restarted.
The file having trouble has 0664 perms and is owned by passenger:passenger If I add clamav to the 'passenger' group, the whole VM becomes unresponsive when the app is connected to. If I clamscan the file having trouble in the logs, everything seems to be OK. Any thoughts? ==> /var/log/clamav/onacc.log <== /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png: Not a regular file ERROR ClamMisc: Unexpected issue; Daemon failed to scan: /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png ==> /var/log/clamav/clamav.log <== Wed Sep 22 09:57:33 2021 -> Client disconnected (FD 9) Wed Sep 22 09:57:33 2021 -> fd[11]: Not a regular file. ERROR test# dir /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png -rw-rw-r-- 1 passenger passenger 1766 Jan 25 2019 /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png test# sudo -u clamav /bin/bash --login test$ clamscan /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png /var/www/passenger/app1/shared/public/assets/favicon-ipad-3f9d14b84a660e5f92e9936caff986b1265746037c15421e693821c15b483444.png: OK ----------- SCAN SUMMARY ----------- Known viruses: 8567354 Engine version: 0.103.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 14.975 sec (0 m 14 s) Start Date: 2021:09:22 10:03:35 End Date: 2021:09:22 10:03:50
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
