Thanks. There is one difference I managed to find which is related to services
in general not just clamav - clamd will be restarted on failure if
it's running as service. This can be an advantage, and pretty big one,
because otherwise we end up creating "watchdog" framework which
itself ends up having way too many complications, based on past experiences.
Ideally though I want to know why we have such a different behaviour on selinux
for standalone vs services approach. I am going to try to raise a bug unless
someone already knows.
Thanks in advance,
-Neel.
From: Matus UHLAR - fantomas via clamav-users
<clamav-users@lists.clamav.net>
Sent: Mon, 10 Jun 2024 16:28:28
To: clamav-users@lists.clamav.net
Cc: Matus UHLAR - fantomas <uh...@fantomas.sk>
Subject: Re: [clamav-users] Using clamd@ service vs launching clamd from
command line
On 10.06.24 10:29, neel roy via clamav-users wrote:
> On selinux, which is the case with me, running clamd as *standalone
> process* is more advantageous than running as systemd service. The
reason
> is mentioned in the post by someone else couple of years back. I am
> facing similar
> issue:&nbsp;https://github.com/Cisco-Talos/clamav/issues/582
>
> In case of systemd process, clamd can have graceful exit using
> &quot;systemd stop clamd@scan&quot; but same can be achieved by
&quot;kill
> -TERM &lt;pid of clamd&gt;&quot; if clamd is running as
standalone
> executable.
>
> So given a choice, what would be reason why a user would want to run
> clamd@ service (instead of standalone process)?
I guess this is only issue related to selinux.
clamd as a systemd "service" is the same daemon as standalone
process, it's
just different selinux policy applied
You would only want clamd as standalone process when you want selinux but
don't want to configure it.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
