Simon Banton wrote:
>> Every day I see in logwatch that my signatures are updated, and the database
>> notified, but if I try to scan a file manually it tells me that my signatures
>> are 55 days old.
>
> I think clamscan looks for the db files in a compiled-in default
> location of /usr/local/share/clamav and doesn't consult the clamd.conf or
> freshclam.conf files (after all, why would it?)
It does at least open freshclam.conf (which means that that one must be
*readable* by the user running clamscan:
admin@mail-gw-3:~$strace -eopen clamscan
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/usr/lib/libclamav.so.4", O_RDONLY) = 3
open("/lib/tls/libpthread.so.0", O_RDONLY) = 3
open("/lib/tls/libc.so.6", O_RDONLY) = 3
open("/usr/lib/libz.so.1", O_RDONLY) = 3
open("/usr/lib/libbz2.so.1", O_RDONLY) = 3
open("/usr/lib/sse2/libgmp.so.3", O_RDONLY) = 3
open("/usr/lib/libclamunrar_iface.so.4", O_RDONLY) = 3
open("/usr/lib/libclamunrar.so.4", O_RDONLY) = 3
open("/etc/freshclam.conf", O_RDONLY) = 3
open("/var/clamav/daily.cld", O_RDONLY) = 3
Cheers,
Ralph
Attachment:
pgpTgHtFfTfjq.pgp
Description: PGP signature
_______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos
