Re: [clamav-users] daily.cvd: Malformed database

2015-05-07 Thread Mark Fortescue
Hi Hans, As you are using SPARC, it may be that someone has changed and/or incorrectly compiled something so that a variable is being read using the wrong byte alignment. ARM also has byte alignment constraints. Try running 'gdb --args /usr/local/sbin/clamd --debug' or use an equivalent dbx

Re: [clamav-users] ERROR: Can't create temporary directory

2023-08-07 Thread Mark Fortescue
Hi Nozomi, The following commands will tell you the user/group information for user=1000, group=1000 (as per the error message): grep ":1000:" /etc/passwd grep ":1000:" /etc/group This will give you text name of the user/group that /var/lib/clamav should be set to. You can change the use

Re: [clamav-users] ERROR: Can't create temporary directory

2023-08-09 Thread Mark Fortescue
/var/lib/clamav After doing the above, I tried running freshclam again, but the error message did not change. This error only occurred when running on AWS ECS. Please let me know if there is anything else I should check. Thank you and regards, Nozomi Tachibanaki -Original Message- From:

Re: [Clamav-users] 0.93.1RC1 (libbz issues)

2008-05-30 Thread Mark Fortescue
the configure scripts/clamav libbz API need to be fixed to detect the issue and either revert to the older libbz API or disable the use of libbz. Regards Mark Fortescue. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] simplest replacement for ancient

2008-08-10 Thread Mark Fortescue
Hi Parveen, >Steven, > >I have a secured environment which governed by HIPAA regulatory, so I >can't keep open everything. > >Thanks, >Parveen The only port you need to get an up to date clamav database is the outgoing HTTP port (TCP:80) [ and DNS so you can get an upto date IP for the server y

Re: [clamav-users] clamav-milter Can't Find Clamd

2017-11-07 Thread Mark Fortescue
Hi, Have you checked the directory permissions: ls -ld /var/run/clamd.scan /run/clamd.scan Regards Mark. On 07/11/17 19:15, Colony.three wrote: Trying to make milter see the clam daemon but can't figure out what's wrong. CentOS7. In /etc/clamd.d/clamd.conf: LocalSocket /var/run/cl

Re: [clamav-users] ClamAV 0.100.1 - clamd signal 11, leaves unix domain socket behind?

2018-09-24 Thread Mark Fortescue
Hi Micah, Can you not have a two part demon process. Part one fork's the real demon and then waits for it to die (with 'wait()'). On death of the child, it cleans up and exits. Yes I know it is not quite as simple as that. It will have to have signal handlers etc. to kill the child etc. and sh

Re: [clamav-users] freshclam getfile failed - and clamav links Cloudfare 1020 error.

2021-03-10 Thread Mark Fortescue via clamav-users
Hi Rémy, This is not a cloudflare issue. This is an EOL issue. You need to update to the latest version of clamav. If the latest pre-built version is 0.99 then you will probably have to learn to build from source. Regards Mark. On 10/03/2021 16:49, Rémy DODIN via clamav-users wrote:

Re: [clamav-users] How to make freshclam to update existing files?

2021-07-08 Thread Mark Fortescue via clamav-users
Hi Michael, How much free user disk space do you have ? I had this sort of problem when I ran out of disk space. The database files need to be uncompressed to apply the daily diffs so you need at least 3 Gig of user disk space free in the database directory. Regards Mark. On 08/07/2

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-19 Thread Mark Fortescue via clamav-users
Hi Paul, Check out what SSL groups are set in /etc/groups. On my uBuntu, the SSL directories are (edited out dates/size): drwxr-xr-x 3 root root /etc/ssl/certs/ drwx--x--- 2 root ssl-cert /etc/ssl/private/ SSL/Curl will complain about these if not set correctly so 'private' and 'certs' wil

Re: [clamav-users] Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)

2021-07-19 Thread Mark Fortescue via clamav-users
Hi Kaushal, You have a small configuration error in you systemd/clamd setup. Not sure if it is the best way but try: sudo cp -p /etc/clamd.d/scan.conf /etc/clamd.d/server.conf Regards Mark. On 19/07/2021 19:47, Matus UHLAR - fantomas wrote: On 20.07.21 00:08, Kaushal Shriyan via cla

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-26 Thread Mark Fortescue via clamav-users
Hi Andrew, My reading of this small section of the log is that the tests failed because the response was not as expected: 'Wrong reply for command' The error seems to be due to the use of a symlink /home/frans/tw/data to /mnt/data/fdb-data. The tests scripts need to do more work if they

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
Hi Joel, One quick answer to why people do not upgrade the OS is that the hardware does not support the upgrade (mostly due to memory and x86_64). I work with embedded systems where the code is very specific to the hardware so new hardware is not an option. For others it may just be the has

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
Hi all, I have two curl installations. One is not suitable for clamav (the system installed version). How do I force cmake to pick up the correct library as it is always picking up the system library not the one in /usr/local/clamav/lib. In order to move to cmake it would be useful to have

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
something wrong or at least opened in an editor to see what it is actually doing. Not sure where to start if cmake does not do what it is meant to do. Regards Mark. On 28/07/2021 00:14, Mark Fortescue via clamav-users wrote: Hi all, I have two curl installations. One is not suitable

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
with 64bit numbers. Any ideas on how to implement a quick fix ? Regards Mark. On 28/07/21 01:14, Mark Fortescue wrote: Hi again, I needed to read all of the INSTALL.md file not just the top bit. Got the cmake build to work and the binaries test OK. Not as user friendly as configure

[clamav-users] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
cause issues on the x86 OS with 64bit numbers. Any ideas on how to implement a quick fix ? Regards Mark. On 28/07/21 01:14, Mark Fortescue wrote: Hi again, I needed to read all of the INSTALL.md file not just the top bit. Got the cmake build to work and the binaries test OK. Not as user

Re: [clamav-users] [SUSPICIOUS] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
Micah -Original Message- From: clamav-users On Behalf Of Mark Fortescue via clamav-users Sent: Wednesday, July 28, 2021 12:02 PM To: clamav-users@lists.clamav.net Cc: Mark Fortescue Subject: [SUSPICIOUS] [clamav-users] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here! Hi

Re: [clamav-users] [SUSPICIOUS] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
Please do. On 28/07/2021 22:02, Micah Snyder (micasnyd) wrote: Will do. Thanks for the fix. Ok if I add you to the acknowledgements section of the news? -Original Message- From: Mark Fortescue Sent: Wednesday, July 28, 2021 1:59 PM To: Micah Snyder (micasnyd) ; ClamAV users ML

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-07-29 Thread Mark Fortescue via clamav-users
Hi All, In my world, 5 years is short. It use to take me 3 years to get a stable enough uBuntu kernel to patch in my changes. The 14.0x LTS 4.4.x kernel never became stable enough. I will be looking to the industrial Linux at 10 to 25 years for kernels for the future. For most of the sof

[clamav-users] PATCH[2]: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-30 Thread Mark Fortescue via clamav-users
Hi Micah, Please find attached patch #2 to clean up patch #1 'if' statements and fix some other issues fond (mostly documentation). The outstanding variable is LIBCLAMAV_LIBS. It is used by clamav-config.in and libclamav.pc.in. Not sure about the logic required for this one. On my OS, it is

Re: [clamav-users] Opinion wanted: Change default config directory usr/clamav

2021-07-31 Thread Mark Fortescue via clamav-users
Hi Micah, On my uBuntu distributions the config files have been in /etc/clamav at least since uBuntu 10.04 LTS so I see no issue with the change. It makes /usr/local/etc consistent with /etc which is always a good thing when you are trying to debug/find/compare things when something has gone

Re: [clamav-users] PATCH[2]: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-08-05 Thread Mark Fortescue via clamav-users
side I'll merge it. Micah Snyder ClamAV Development Talos Cisco Systems, Inc. ---- *From:* Mark Fortescue *Sent:* Friday, July 30, 2021 6:36 AM *To:* Micah Snyder (micasnyd) ; ClamAV users ML *Subject:* PATCH[2]: Re: ClamAV®

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-08-06 Thread Mark Fortescue via clamav-users
Hi Andrew, I have placed two patches on the user list that I believe may fix the issue you are seeing. I was seeing a similar issue hence the investigation and resulting patches. https://www.mail-archive.com/clamav-users@lists.clamav.net/msg50910.html and ttps://www.mail-archive.com/clamav-

Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread Mark Fortescue via clamav-users
Hi Max, Please be aware that at present, ClamAV can't scan files above 2G because of internal variable limitations. If your ZIP files are around 2G then this may be the limit you are encountering. Regards Mark. On 04/10/2021 09:37, Max Allan via clamav-users wrote: Thanks Laurent,

Re: [clamav-users] Clamav with a samba server ?

2019-07-29 Thread Mark Fortescue via clamav-users
risk of upsetting other users. It is never a good thing to install new software that you are not familiar with on a live system without first trying it out on a test system. Regards Mark Fortescue On 26/07/2019 16:29, Edouard Guigné wrote: Hello again, I read the docs from the

Re: [clamav-users] fanotify allowed in kernel, clamd running as root, clamd complaining it needs to run as root

2019-09-04 Thread Mark Fortescue via clamav-users
Hi Jeff, Looks like Apparmor may be stepping in and preventing access. Have you checked that Apparmor has been changed to give clamd the required permissions ? Regards Mark. On 03/09/2019 22:01, Jeff Blaine via clamav-users wrote: Hello all, I'm experiencing something odd on Ubuntu

Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-10-10 Thread Mark Fortescue via clamav-users
Hi, You are forgetting things like embedded systems in hospitals that can't reasonably be updated. The NHS got stung by this with XP and Microsoft had to produce a post EOL fix. Outside of the computer industry, software and hardware move forward at a snails pace. Many systems still use Wi

Re: [clamav-users] Stop clamdscan from stepping on itself?

2019-10-21 Thread Mark Fortescue via clamav-users
Hi, One point that seems to have been missed is that it is that 'clamdscan' is not necessarily creating the files in '/tmp'. It is most likely 'clamd' which is a separate independent program. Given this, 'clamdscan' will not know what files to exclude form '/tmp' unless the clamd/clamdscan co

Re: [clamav-users] 0.102.1 and Solaris 11.3...

2019-11-30 Thread Mark Fortescue via clamav-users
Hi Gary, How much memory do you have available. You probably need 8G or more of ram for the latest and greatest as my understanding is that may be storing two copies of the databases in ram to speed up database reloading delays. Your SSL library is running out of memory after downloading the

Re: [clamav-users] freshclam in clamav 0.102.2 stuck in cli_tgzload

2020-03-21 Thread Mark Fortescue via clamav-users
Hi Pierluigi, Had a quick look at an older version of the code. It probably has not changed too much. To loop as described, it means that fseek() and ftell() are not working properly in libclamav/cvd.c. Just looking at the definitions of the types, there may be an issue with 'size' and 'pa

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-17 Thread Mark Fortescue via clamav-users
Hi Kevin, It looks like you will have to create/enable private versions of the openat(), ranameat() and unlinkat() functions. These can be simulated using regular C functions open(), unlink(), rename(), stat() and readdir(). You will need to get manual pages for openat(), ranameat() and un

Re: [clamav-users] Thousands of log entries for real filename

2020-09-11 Thread Mark Fortescue via clamav-users
Hi Royce, There may be an issue with the way you are running clamonacc. Scanning the hole filing system can cause recursion as the system may try to re-scan the log every time it is updated generating a new log entry or may try to scan special files that are not suitable for scanning. Stop t

Re: [clamav-users] Clamd.exe

2020-10-23 Thread Mark Fortescue via clamav-users
Hi, Have you tried C:\\Windows or C:/Windows. Just a thought. Regards Mark. On 23/10/2020 19:46, Marcy Rogers via clamav-users wrote: Ged Thank you for the advice. When I installed Clamav for Windows, the install places the Clamav in the c:\program files. I followed the instructions f

Re: [clamav-users] clamd scan problem

2020-10-31 Thread Mark Fortescue via clamav-users
Hi Tsutomu, How much memory is available on your AIX system ? Recommendations vary but I think the general rule will be you need 4GBytes or more for any server that has to do more than just run Clamd. Anything less that 2GBytes is going to be very slow or fail. Regards Mark. On 31/1

Re: [clamav-users] ClamAV Scan - Data Read vs Data Scanned

2020-11-03 Thread Mark Fortescue via clamav-users
Hi all, I would call this a bug. Scanning 1 byte is the same as scanning 1 block. When storing things in blocks is is always important to round up or you get a false impression of reality. You can't store 100 bytes in 0 disk sectors of 128 bytes. It is always 1 disk sector. Can you not jus

Re: [clamav-users] ClamAV Scan - Data Read vs Data Scanned

2020-11-04 Thread Mark Fortescue via clamav-users
number of 16kb blocks, then it should be counting at least 0.016384 MB (or 0.015625 MiB) for tiny files. By normal rounding rules this should display as 0.02 MB/MiB. On Tue, 3 Nov 2020 17:50:18 + Mark Fortescue via clamav-users wrote: > Hi all, > >