Bill Shupp wrote:

> I'll get this added to the toaster.


Not sure if you're following the clamav list at all, but..  0.85 seems
to have introduced what some people are calling a bug.  Prior releases
created the clamd.log and freshclam.log files with owner and group of
root.  Even though clam was running with the clamav user (or whatever
you specified) it was still able to write to the files.  (I suspect that
was actually the bug, and the current behaviour is more correct,
although not perfect.. the files should be created with the clam user,
not root) ..  Now, if the files are owned by root, and permissions are
not world writeable, clam can't write to the logs.

So, the long and short of it is that I would recommend specifiying the
owner and group in the rotate config, as well as the modes for the
files..  I use this here :

/var/log/clamav/clamd.log {
    missingok
    nocompress
    create 644 clamav clamav
    postrotate
        /sbin/service clamd reload 2> /dev/null 2> /dev/null || true
    endscript
}

/var/log/clamav/freshclam.log {
    missingok
    nocompress
    create 644 clamav clamav
    postrotate
        /sbin/service freshclam reload  2> /dev/null 2> /dev/null || true
    endscript
}

> Thanks Tom,
>
> Bill



-- 
---------------------------
Jason 'XenoPhage' Frisvold
Engine / Technology Programmer
[EMAIL PROTECTED]
RedHat Certified - RHCE # 803004140609871
MySQL Pro Certified - ID# 207171862
MySQL Core Certified - ID# 205982910
---------------------------
"Something mysterious is formed, born in the silent void. Waiting alone and 
unmoving, it is at once still and yet in constant motion. It is the source of 
all programs. I do not know its name, so I will call it the Tao of Programming."

Reply via email to