Jim Maul said:
> Dennis Peterson wrote:
>> Jim Maul said:
>>
>>
>
>
>
>> That doesn't happen if you start it as the run-as user. It happens if
>> you
>> start it as root. That is why I say this "bug" is not necessarily a bug,
>> but an administrative issue.
>>
>
> This was the key piece to the puz
Dennis Peterson wrote:
Jim Maul said:
That doesn't happen if you start it as the run-as user. It happens if you
start it as root. That is why I say this "bug" is not necessarily a bug,
but an administrative issue.
This was the key piece to the puzzle that i was missing. From the posts
of the p
Jim Maul said:
> Let me attempt to clear up any confusion (and hopefully put this thread
> to rest) by saying that I personally am not having any problems with
> clamav and i am not experiencing the logging issue that actually started
> this thread. I do and always have run clamav as qscand. My
On Tue, 17 May 2005 16:09:01 +0400 in [EMAIL PROTECTED]
Sergey <[EMAIL PROTECTED]> wrote:
> i've just noticed the same thing. clamd.log is made by root. but 0.84
> doesn't care about that it works properly.
I have the same setup as you, but my log files are owned clamav:clamav,
using an rpm ins
On 5/17/05, Dennis Peterson <[EMAIL PROTECTED]> wrote:
> You said it shouldn't log to / and there's no reason it shouldn't if that
> is where one wishes it to log. There's lots of reasons why that would be a
> bad idea, but it's an admin decision, not an application issue.
It sounds like clam is c
Dennis Peterson wrote:
Jim Maul said:
Dennis Peterson wrote:
To the program itself, no. If you tell it to log to / it will, however,
it SHOULDNT. See what im saying? To say that clamav *has* to create
the log file as root because only root can write to /var/log/ is
irrelevant to the issue.
Whi
Jim Maul said:
> Dennis Peterson wrote:
>>>
>>>To the program itself, no. If you tell it to log to / it will, however,
>>>it SHOULDNT. See what im saying? To say that clamav *has* to create
>>>the log file as root because only root can write to /var/log/ is
>>>irrelevant to the issue.
>>
>>
>>
Dennis Peterson wrote:
Jim Maul said:
Dennis Peterson wrote:
Jim Maul said:
Matt Fretwell wrote:
Jim Maul wrote:
Call me old fashioned, but this is something I like to deal with
myself. There's still a roll for the thinking admin.
No, dont get me wrong here, im not saying clamav should "predi
Jim Maul said:
> Dennis Peterson wrote:
>> Jim Maul said:
>>
>>>Matt Fretwell wrote:
>>>
Jim Maul wrote:
>>Call me old fashioned, but this is something I like to deal with
>>myself. There's still a roll for the thinking admin.
>No, dont get me wrong her
Dennis Peterson wrote:
Jim Maul said:
Matt Fretwell wrote:
Jim Maul wrote:
Call me old fashioned, but this is something I like to deal with
myself. There's still a roll for the thinking admin.
No, dont get me wrong here, im not saying clamav should "predict"
anything. Nor should it have to deal
Jim Maul said:
> Matt Fretwell wrote:
>> Jim Maul wrote:
>>
>>
Call me old fashioned, but this is something I like to deal with
myself. There's still a roll for the thinking admin.
>>
>>
>>
>>>No, dont get me wrong here, im not saying clamav should "predict"
>>>anything. Nor should it have
Matt Fretwell wrote:
Jim Maul wrote:
The main point of my point, (I know that sounds weird), is that an
admin who relies upon any piece of software to correctly create and
set permissions on the logfile is asking for trouble. Clam is not
alone in this. This is not a bug in Clam, it is poor admin t
Jim Maul wrote:
> > The main point of my point, (I know that sounds weird), is that an
> > admin who relies upon any piece of software to correctly create and
> > set permissions on the logfile is asking for trouble. Clam is not
> > alone in this. This is not a bug in Clam, it is poor admin te
Matt Fretwell wrote:
Jim Maul wrote:
touch /var/log/test.log
Now why does it create the logfile as root?
While i get your point, it is irrelevant because it should not log in
/var/log/ directly. It should log in /var/log/clamav/
The main point of my point, (I know that sounds weird), is that
Jim Maul wrote:
> Matt Fretwell wrote:
>> Just to test, as an ordinary user, run:
>>
>> touch /var/log/test.log
>>
>> Now why does it create the logfile as root?
>>
>
> While i get your point, it is irrelevant because it should not log in
> /var/log/ directly. It should log in /var/log/clama
Jim Maul wrote:
> > touch /var/log/test.log
> >
> > Now why does it create the logfile as root?
> While i get your point, it is irrelevant because it should not log in
> /var/log/ directly. It should log in /var/log/clamav/
The main point of my point, (I know that sounds weird), is that an
Matt Fretwell wrote:
Jim Maul wrote:
Call me old fashioned, but this is something I like to deal with
myself. There's still a roll for the thinking admin.
No, dont get me wrong here, im not saying clamav should "predict"
anything. Nor should it have to deal with misconfigured software. This
Jim Maul wrote:
> > Call me old fashioned, but this is something I like to deal with
> > myself. There's still a roll for the thinking admin.
> No, dont get me wrong here, im not saying clamav should "predict"
> anything. Nor should it have to deal with misconfigured software. This
> is of co
Sergey wrote:
> DP> We have a winner! Now if you put that in your startup script and log
> DP> rotation tool you'll have the job finished.
>
> why is that? if i'll restart clamd it won't going to change the
> permissions of clamd.log. and by the way i don't need any log rotation
> because my clam
Sergey wrote:
> KP> Clamav should create log file with same owner as defined in
> KP> clamd.conf to work it properly.
>
> i've just noticed the same thing. clamd.log is made by root. but 0.84
> doesn't care about that it works properly.
The response someone posted a few days ago regarding 'sof
Erich Titl said:
>>
> You could not log problems while dropping privileges, well basically it
> might go to the (unwatched) console
>
Because I'm self-described "anal", I capture my console to a file with
syslog and it is watched with automation and so is syslog. Here's to anal
admins and self-he
On Tue, May 17, 2005 at 03:50:38PM +, Erich Titl said:
> Stephen Gran wrote:
> >On Tue, May 17, 2005 at 02:56:14PM +, Erich Titl said:
> >>might lead to problems with logging _before_ dropping privileges
> >
> >What, in particular, are you thinking of? If the first thing clamd does
> >is d
Stephen Gran said:
> On Tue, May 17, 2005 at 07:54:03AM -0700, Dennis Peterson said:
>> Stephen Gran said:
>> > So you want either all possible checks, or no seperable logging?
>>
>> Where did I say that? With syslog you touch a file and it starts
>> logging. Simple, effective. It can be the same
Stephen Gran wrote:
On Tue, May 17, 2005 at 02:56:14PM +, Erich Titl said:
Stephen Gran wrote:
...
So you want either all possible checks, or no seperable logging? That
does seem like a rather drastic set of solutions to a trivial to fix
bug. Moving about 10 lines of code will fix the
On Tue, May 17, 2005 at 07:54:03AM -0700, Dennis Peterson said:
> Stephen Gran said:
> > So you want either all possible checks, or no seperable logging?
>
> Where did I say that? With syslog you touch a file and it starts
> logging. Simple, effective. It can be the same with clam. No local
> log
On Tue, May 17, 2005 at 02:56:14PM +, Erich Titl said:
> Stephen Gran wrote:
>
> >...
> >
> >So you want either all possible checks, or no seperable logging? That
> >does seem like a rather drastic set of solutions to a trivial to fix
> >bug. Moving about 10 lines of code will fix the bug un
Stephen Gran wrote:
...
So you want either all possible checks, or no seperable logging? That
does seem like a rather drastic set of solutions to a trivial to fix
bug. Moving about 10 lines of code will fix the bug under discussion,
might lead to problems with logging _before_ dropping privile
Stephen Gran said:
> On Tue, May 17, 2005 at 07:03:10AM -0700, Dennis Peterson said:
>> That would be a good trick if the directory it is found in is owned ro
>> by
>> root. I suppose it could be created by root then chowned to clam_user,
>> but
>> that too presumes much. To make it entirely turnke
Dennis Peterson wrote:
Jim Maul said:
Dennis Peterson wrote:
That would be a good trick if the directory it is found in is owned ro
by
root. I suppose it could be created by root then chowned to clam_user,
but
that too presumes much. To make it entirely turnkey the process should
see
if the user-s
On Tue, May 17, 2005 at 07:03:10AM -0700, Dennis Peterson said:
> That would be a good trick if the directory it is found in is owned ro by
> root. I suppose it could be created by root then chowned to clam_user, but
> that too presumes much. To make it entirely turnkey the process should see
> if
Jim Maul said:
> Dennis Peterson wrote:
>>
>> That would be a good trick if the directory it is found in is owned ro
>> by
>> root. I suppose it could be created by root then chowned to clam_user,
>> but
>> that too presumes much. To make it entirely turnkey the process should
>> see
>> if the use
Dennis Peterson wrote:
Jim Maul said:
DP> We have a winner! Now if you put that in your startup script and log
DP> rotation tool you'll have the job finished.
why is that? if i'll restart clamd it won't going to change the
permissions of clamd.log. and by the way i don't need any log rotation
bec
Stephen Gran said:
> On Tue, May 17, 2005 at 01:17:34PM +0200, Tomasz Kojm said:
>> The only 'essential' information you have provided is that
>> clamav-milter prints "Permission denied" on startup so don't expect
>> constructive help from me.
>
> The problem here is that clamav opens/creates the l
Jim Maul said:
>>
>>
>>
>> DP> We have a winner! Now if you put that in your startup script and log
>> DP> rotation tool you'll have the job finished.
>>
>> why is that? if i'll restart clamd it won't going to change the
>> permissions of clamd.log. and by the way i don't need any log rotation
>>
On Tue, May 17, 2005 at 01:17:34PM +0200, Tomasz Kojm said:
> The only 'essential' information you have provided is that
> clamav-milter prints "Permission denied" on startup so don't expect
> constructive help from me.
The problem here is that clamav opens/creates the log at
clamd/clamd.c:144, bu
Sergey wrote:
Hello Dennis,
Tuesday, May 17, 2005, 5:11:43 PM, you wrote:
DP> Sergey said:
Hello Andrzej,
Tuesday, May 17, 2005, 3:52:31 PM, you wrote:
AZ> Sergey wrote:
AZ> [...]
-rw-r- 1 rootclamav 1265 May 17 15:40 clamd.log
AZ> ^^
AZ> How clamd (in realy
Dennis Peterson wrote:
Bill Maidment said:
Sergey wrote:
Hello Krištof,
KP> # grep User /etc/clamd.conf
KP> User clamav
Shouldn't the conf files be in /usr/local/etc/ ???
That's how it works for me and my log file is owned by clamav
That is dependant upon who built the binaries and the choices th
Hello,
On 17 May 2005, at 13:17, Tomasz Kojm wrote:
On Tue, 17 May 2005 15:10:12 +0400
Sergey <[EMAIL PROTECTED]> wrote:
Hello Tomasz,
Tuesday, May 17, 2005, 2:27:00 PM, you wrote:
TK> On Tue, 17 May 2005 11:16:54 +0400
TK> Sergey <[EMAIL PROTECTED]> wrote:
Hello clamav-users,
i've just tried
Bill Maidment said:
> Sergey wrote:
>> Hello Kritof,
>>
>
>
>> KP> # grep User /etc/clamd.conf
>> KP> User clamav
>>
>
> Shouldn't the conf files be in /usr/local/etc/ ???
> That's how it works for me and my log file is owned by clamav
>
That is dependant upon who built the binaries and the choic
Sergey wrote:
Hello Kriљtof,
KP> # grep User /etc/clamd.conf
KP> User clamav
Shouldn't the conf files be in /usr/local/etc/ ???
That's how it works for me and my log file is owned by clamav
Cheers
Bill
--
What's the difference between Linux and Windoze?
Linux - Thousands of programmers are worki
Sergey wrote:
[...]
> -rw-r- 1 rootclamav 1265 May 17 15:40 clamd.log
^^
How clamd (in realy user clamav.clamav) can write to this file??
[...]
--
Andrzej Zawadzki
___
http://lurker.clamav.net/list/clamav-users.h
Tomasz Kojm wrote:
On Tue, 17 May 2005 12:55:36 +0200
Krištof Petr <[EMAIL PROTECTED]> wrote:
Sergey is right. This bug is not fixed.
May 17 12:36:41 server clamd: clamd startup succeeded
May 17 12:36:41 server clamd[27991]: HTML support enabled.
May 17 12:36:41 server clamd[27991]: Self checkin
On Tue, 17 May 2005 15:10:12 +0400
Sergey <[EMAIL PROTECTED]> wrote:
> Hello Tomasz,
>
> Tuesday, May 17, 2005, 2:27:00 PM, you wrote:
>
> TK> On Tue, 17 May 2005 11:16:54 +0400
> TK> Sergey <[EMAIL PROTECTED]> wrote:
>
> >> Hello clamav-users,
> >>
> >>i've just tried to use 0.85 and 0.85
On Tue, 17 May 2005 12:55:36 +0200
Kritof Petr <[EMAIL PROTECTED]> wrote:
> Sergey is right. This bug is not fixed.
>
>
> May 17 12:36:41 server clamd: clamd startup succeeded
> May 17 12:36:41 server clamd[27991]: HTML support enabled.
> May 17 12:36:41 server clamd[27991]: Self checking every
Tomasz Kojm wrote:
On Tue, 17 May 2005 11:16:54 +0400
Sergey <[EMAIL PROTECTED]> wrote:
Hello clamav-users,
i've just tried to use 0.85 and 0.85.1 instead of my 0.84 but i
found an error massage on starting clamav-milter ("Permission
denied"). is there any chance to solve this little probl
On Tue, 17 May 2005 11:16:54 +0400
Sergey <[EMAIL PROTECTED]> wrote:
> Hello clamav-users,
>
>i've just tried to use 0.85 and 0.85.1 instead of my 0.84 but i
>found an error massage on starting clamav-milter ("Permission
>denied"). is there any chance to solve this little problem?
I
46 matches
Mail list logo
