Hello,

We are seeing an issue with clamonacc on a Rocky Linux server. This is
not a machine that we have access to and are asking this on their
behalf. They currently are seeing clamonacc consume all the inodes on
/tmp. The only way to recover the inodes is to kill clamonacc. Of
course, this causes numerous issues while the server is in operation
and the clamonacc program is hung. The server is running kubernetes in
user mode, not under the root user. They have quite a few jobs in
kubernetes that run and add log files to /tmp. /tmp is being actively
monitored and must be monitored by clamav. The log file shows these
error messages

ERROR: ClamCom: TIMEOUT while waiting on socket (recv)
ERROR: Can't send to clamd: Broken pipe
ERROR: Clamonacc: clamonacc has experienced a fatal error, if you
continue to see this error, please run clamonacc with --verbose and
report the issue and crash report to the developpers

Other note, SELinux is enabled on this server but we have not
encountered anything in the logs that indicates clamav is triggering.
Some notes on the server

OS: Rocky Linux 8
ClamAV Version: ClamAV 1.0.7/27490

We would be grateful for any tips or thoughts you may have! Thanks for
your help!
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to