LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   /etc/clamav.conf does not exist after install (https://www.linuxquestions.org/questions/linux-software-2/etc-clamav-conf-does-not-exist-after-install-521257/)

blackdragonblood 01-20-2007 05:07 PM

/etc/clamav.conf does not exist after install
 
I installed clamav on my Fedora Core 6 box and I don't have /etc/clamav.conf.

List of packages:
Quote:

clamav.i386 0.88.7-1.fc6 installed
clamav-data.i386 0.88.7-1.fc6 installed
clamav-lib.i386 0.88.7-1.fc6 installed
clamav-server.i386 0.88.7-1.fc6 installed
clamav-server-sysv.i386 0.88.7-1.fc6 installed
clamav-update.i386 0.88.7-1.fc6 installed
clamav-devel.i386 0.88.7-1.fc6 extras
clamav-milter.i386 0.88.7-1.fc6 extras
clamav-milter-sysv.i386 0.88.7-1.fc6 extras
claws-mail-plugins-clamav.i386 2.7.1-1.fc6 extras
exim-clamav.i386 4.63-5.fc6 extras
sylpheed-claws-plugins-clamav.i386 2.6.0-1.fc6 extras
Also, /etc/init.d/clamd does not exist either. What am I missing?

unSpawn 01-21-2007 04:57 PM

The ClamAV daemon package: "clamd" and AFAIK /etc/clamav.conf is replaced by /etc/clamd.conf.

blackdragonblood 01-21-2007 07:00 PM

I now have an /etc/clamd.conf file, but now I get the following error when I run "clamd" as root:

Quote:

ERROR: Can't get information about user <USER>.
/etc/clamd.conf:
Code:

##
## Example config file for the Clam AV daemon
## Please read the clamd.conf(5) manual before editing this file.
##


# Comment or remove the line below.
#Example

# Uncomment this option to enable logging.
# LogFile must be writable for the user running daemon.
# A full path is required.
# Default: disabled
LogFile /var/log/clamd.<SERVICE>

# By default the log file is locked for writing - the lock protects against
# running clamd multiple times (if you want to run another clamd instance,
# please # copy the configuration file, change the LogFile variable, and run
# the daemon with the --config-file option).
# This option disables log file locking.
# Default: disabled
#LogFileUnlock

# Maximal size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size
# in bytes just don't use modifiers.
# Default: 1M
#LogFileMaxSize 2M

# Log time with each message.
# Default: disabled
#LogTime

# Also log clean files. Useful in debugging but drastically increases the
# log size.
# Default: disabled
#LogClean

# Use system logger (can work together with LogFile).
# Default: disabled
#LogSyslog

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
# Default: LOG_LOCAL6
#LogFacility LOG_MAIL

# Enable verbose logging.
# Default: disabled
#LogVerbose

# This option allows you to save a process identifier of the listening
# daemon (main thread).
# Default: disabled
PidFile /var/run/clamd.<SERVICE>/clamd.pid

# Optional path to the global temporary directory.
# Default: system specific (usually /tmp or /var/tmp).
#TemporaryDirectory /var/tmp

# Path to the database directory.
# Default: hardcoded (depends on installation options)
#DatabaseDirectory /var/lib/clamav

# The daemon works in a local OR a network mode. Due to security reasons we
# recommend the local mode.

# Path to a local socket file the daemon will listen on.
# Default: disabled
LocalSocket /var/run/clamd.<SERVICE>/clamd.sock

# Remove stale socket after unclean shutdown.
# Default: disabled
FixStaleSocket

# TCP port address.
# Default: disabled
#TCPSocket 3310

# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
# Default: disabled
#TCPAddr 127.0.0.1

# Maximum length the queue of pending connections may grow to.
# Default: 15
#MaxConnectionQueueLength 30

# Clamd uses FTP-like protocol to receive data from remote clients.
# If you are using clamav-milter to balance load between remote clamd daemons
# on firewall servers you may need to tune the options below.

# Close the connection when the data size limit is exceeded.
# The value should match your MTA's limit for a maximal attachment size.
# Default: 10M
#StreamMaxLength 20M

# Limit port range.
# Default: 1024
#StreamMinPort 30000
# Default: 2048
#StreamMaxPort 32000

# Maximal number of threads running at the same time.
# Default: 10
#MaxThreads 20

# Waiting for data from a client socket will timeout after this time (seconds).
# Value of 0 disables the timeout.
# Default: 120
#ReadTimeout 300

# Waiting for a new job will timeout after this time (seconds).
# Default: 30
#IdleTimeout 60

# Maximal depth directories are scanned at.
# Default: 15
#MaxDirectoryRecursion 20

# Follow directory symlinks.
# Default: disabled
#FollowDirectorySymlinks

# Follow regular file symlinks.
# Default: disabled
#FollowFileSymlinks

# Perform internal sanity check (database integrity and freshness).
# Default: 1800 (30 min)
#SelfCheck 600

# Execute a command when virus is found. In the command string %v will
# be replaced by a virus name.
# Default: disabled
#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"

# Run as a selected user (clamd must be started by root).
# Default: disabled
User <USER>

# Initialize supplementary group access (clamd must be started by root).
# Default: disabled
#AllowSupplementaryGroups

# Stop daemon when libclamav reports out of memory condition.
#ExitOnOOM

# Don't fork into background.
# Default: disabled
#Foreground

# Enable debug messages in libclamav.
# Default: disabled
#Debug

# Do not remove temporary files (for debug purposes).
# Default: disabled
#LeaveTemporaryFiles


# By default clamd uses scan options recommended by libclamav. This option
# disables recommended options and allows you to enable selected ones below.
# DO NOT TOUCH IT unless you know what you are doing.
# Default: disabled
#DisableDefaultScanOptions

##
## Executable files
##

# PE stands for Portable Executable - it's an executable file format used
# in all 32-bit versions of Windows operating systems. This option allows
# ClamAV to perform a deeper analysis of executable files and it's also
# required for decompression of popular executable packers such as UPX, FSG,
# and Petite.
# Default: enabled
#ScanPE

# With this option clamav will try to detect broken executables and mark
# them as Broken.Executable
# Default: disabled
#DetectBrokenExecutables


##
## Documents
##

# This option enables scanning of Microsoft Office document macros.
# Default: enabled
#ScanOLE2

##
## Mail files
##

# Enable internal e-mail scanner.
# Default: enabled
#ScanMail

# If an email contains URLs ClamAV can download and scan them.
# WARNING: This option may open your system to a DoS attack.
#          Never use it on loaded servers.
# Default: disabled
#MailFollowURLs

# Recursion level limit for the mail scanner.
# Default: 64
#MailMaxRecursion 128


##
## HTML
##

# Perform HTML normalisation and decryption of MS Script Encoder code.
# Default: enabled
#ScanHTML


##
## Archives
##

# ClamAV can scan within archives and compressed files.
# Default: enabled
#ScanArchive

# Due to license issues libclamav does not support RAR 3.0 archives (only the
# old 2.0 format is supported). Because some users report stability problems
# with unrarlib it's disabled by default and you must uncomment the directive
# below to enable RAR 2.0 support.
# Default: disabled
#ScanRAR

# The options below protect your system against Denial of Service attacks
# using archive bombs.

# Files in archives larger than this limit won't be scanned.
# Value of 0 disables the limit.
# Default: 10M
#ArchiveMaxFileSize 15M

# Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
# file, all files within it will also be scanned. This options specifies how
# deep the process should be continued.
# Value of 0 disables the limit.
# Default: 8
#ArchiveMaxRecursion 9

# Number of files to be scanned within an archive.
# Value of 0 disables the limit.
# Default: 1000
#ArchiveMaxFiles 1500

# If a file in an archive is compressed more than ArchiveMaxCompressionRatio
# times it will be marked as a virus (Oversized.ArchiveType, e.g. Oversized.Zip)
# Value of 0 disables the limit.
# Default: 250
#ArchiveMaxCompressionRatio 300

# Use slower but memory efficient decompression algorithm.
# only affects the bzip2 decompressor.
# Default: disabled
#ArchiveLimitMemoryUsage

# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).
# Default: disabled
#ArchiveBlockEncrypted

# Mark archives as viruses (e.g. RAR.ExceededFileSize, Zip.ExceededFilesLimit)
# if ArchiveMaxFiles, ArchiveMaxFileSize, or ArchiveMaxRecursion limit is
# reached.
# Default: disabled
#ArchiveBlockMax


##
## Clamuko settings
## WARNING: This is experimental software. It is very likely it will hang
##            up your system!!!
##

# Enable Clamuko. Dazuko (/dev/dazuko) must be configured and running.
# Default: disabled
#ClamukoScanOnAccess

# Set access mask for Clamuko.
# Default: disabled
#ClamukoScanOnOpen
#ClamukoScanOnClose
#ClamukoScanOnExec

# Set the include paths (all files in them will be scanned). You can have
# multiple ClamukoIncludePath directives but each directory must be added
# in a seperate line.
# Default: disabled
#ClamukoIncludePath /home
#ClamukoIncludePath /students

# Set the exclude paths. All subdirectories are also excluded.
# Default: disabled
#ClamukoExcludePath /home/guru

# Don't scan files larger than ClamukoMaxFileSize
# Value of 0 disables the limit.
# Default: 5M
#ClamukoMaxFileSize 10M


Berhanie 01-21-2007 07:55 PM

Code:

# Run as a selected user (clamd must be started by root).
# Default: disabled
User <USER>

Set this to the owner of the clamd process.

blackdragonblood 01-21-2007 09:03 PM

"clamd" now works, but I don't see it in chkconfig. How can I configure clamd to start at boot?

unSpawn 01-22-2007 09:13 AM

"man chkconfig" says "chkconfig servicename --level levels start", so "chkconfig clamd --level 345 start" would run it in the default network-enabled and multiuser runlevels.

blackdragonblood 01-22-2007 10:33 AM

I would love to do that, but I don't have a clamd to add to runlevels. :(

chkconfig --list:
Code:

NetworkManager  0:off  1:off  2:off  3:off  4:off  5:off  6:off
NetworkManagerDispatcher        0:off  1:off  2:off  3:off  4:off  5:off  6:off
acpid          0:off  1:off  2:off  3:on    4:on    5:on    6:off
anacron        0:off  1:off  2:on    3:on    4:on    5:on    6:off
apmd            0:off  1:off  2:on    3:on    4:on    5:on    6:off
atd            0:off  1:off  2:off  3:on    4:on    5:on    6:off
autofs          0:off  1:off  2:off  3:on    4:on    5:on    6:off
avahi-daemon    0:off  1:off  2:off  3:on    4:on    5:on    6:off
avahi-dnsconfd  0:off  1:off  2:off  3:off  4:off  5:off  6:off
capi            0:off  1:off  2:off  3:off  4:off  5:off  6:off
cpuspeed        0:off  1:on    2:on    3:on    4:on    5:on    6:off
crond          0:off  1:off  2:on    3:on    4:on    5:on    6:off
cups            0:off  1:off  2:on    3:on    4:on    5:on    6:off
dhcdbd          0:off  1:off  2:off  3:off  4:off  5:off  6:off
diskdump        0:off  1:off  2:off  3:off  4:off  5:off  6:off
dund            0:off  1:off  2:off  3:off  4:off  5:off  6:off
firstboot      0:off  1:off  2:off  3:on    4:off  5:on    6:off
gpm            0:off  1:off  2:on    3:on    4:on    5:on    6:off
haldaemon      0:off  1:off  2:off  3:on    4:on    5:on    6:off
hidd            0:off  1:off  2:on    3:on    4:on    5:on    6:off
hplip          0:off  1:off  2:on    3:on    4:on    5:on    6:off
httpd          0:off  1:off  2:off  3:off  4:off  5:off  6:off
ip6tables      0:off  1:off  2:on    3:on    4:on    5:on    6:off
iptables        0:off  1:off  2:on    3:on    4:on    5:on    6:off
irda            0:off  1:off  2:off  3:off  4:off  5:off  6:off
irqbalance      0:off  1:off  2:on    3:on    4:on    5:on    6:off
isdn            0:off  1:off  2:on    3:on    4:on    5:on    6:off
kudzu          0:off  1:off  2:off  3:on    4:on    5:on    6:off
lirc            0:off  1:off  2:off  3:off  4:off  5:off  6:off
mcstrans        0:off  1:off  2:on    3:on    4:on    5:on    6:off
mdmonitor      0:off  1:off  2:on    3:on    4:on    5:on    6:off
mdmpd          0:off  1:off  2:off  3:off  4:off  5:off  6:off
messagebus      0:off  1:off  2:off  3:on    4:on    5:on    6:off
microcode_ctl  0:off  1:off  2:off  3:off  4:off  5:off  6:off
multipathd      0:off  1:off  2:off  3:off  4:off  5:off  6:off
mysqld          0:off  1:off  2:off  3:off  4:off  5:off  6:off
netdump        0:off  1:off  2:off  3:off  4:off  5:off  6:off
netfs          0:off  1:off  2:off  3:on    4:on    5:on    6:off
netplugd        0:off  1:off  2:off  3:off  4:off  5:off  6:off
network        0:off  1:off  2:on    3:on    4:on    5:on    6:off
nfs            0:off  1:off  2:off  3:off  4:off  5:off  6:off
nfslock        0:off  1:off  2:off  3:on    4:on    5:on    6:off
nscd            0:off  1:off  2:off  3:off  4:off  5:off  6:off
ntpd            0:off  1:off  2:off  3:on    4:off  5:on    6:off
pand            0:off  1:off  2:off  3:off  4:off  5:off  6:off
pcscd          0:off  1:off  2:on    3:on    4:on    5:on    6:off
portmap        0:off  1:off  2:off  3:on    4:on    5:on    6:off
psacct          0:off  1:off  2:off  3:off  4:off  5:off  6:off
rdisc          0:off  1:off  2:off  3:off  4:off  5:off  6:off
readahead_early 0:off  1:off  2:on    3:on    4:on    5:on    6:off
readahead_later 0:off  1:off  2:off  3:off  4:off  5:on    6:off
restorecond    0:off  1:off  2:on    3:on    4:on    5:on    6:off
rpcgssd        0:off  1:off  2:off  3:on    4:on    5:on    6:off
rpcidmapd      0:off  1:off  2:off  3:on    4:on    5:on    6:off
rpcsvcgssd      0:off  1:off  2:off  3:off  4:off  5:off  6:off
saslauthd      0:off  1:off  2:off  3:off  4:off  5:off  6:off
sendmail        0:off  1:off  2:on    3:on    4:on    5:on    6:off
smartd          0:off  1:off  2:on    3:on    4:on    5:on    6:off
spamassassin    0:off  1:off  2:off  3:off  4:off  5:off  6:off
sshd            0:off  1:off  2:on    3:on    4:on    5:on    6:off
syslog          0:off  1:off  2:on    3:on    4:on    5:on    6:off
vncserver      0:off  1:off  2:off  3:off  4:off  5:off  6:off
winbind        0:off  1:off  2:off  3:off  4:off  5:off  6:off
wpa_supplicant  0:off  1:off  2:off  3:off  4:off  5:off  6:off
xfs            0:off  1:off  2:on    3:on    4:on    5:on    6:off
ypbind          0:off  1:off  2:off  3:off  4:off  5:off  6:off


unSpawn 01-22-2007 11:08 AM

- Where did your Clamd RPM come from and what's the fullname ("rpm -q clamd")?
- Did you see any errors while installing the RPM?
- Type "rpm -q clamd --scripts | grep chkconfig": does it show one or two lines with 'chkconfig' in it?
- Type "grep chkconfig: /etc/rc.d/init.d/clamd": does it show one 'chkconfig' line?

If not this should be fixed so add a bug report in FC's tracker. Now, to fix this locally:
- open up the file in your favorite editor and
- add a line "# chkconfig: 2345 61 39" below the shebang line (that's the "#!/bin/sh" one),
- save, close file,
- type "chkconfig --add clamd".
To test this works type "chkconfig --list clamd".

blackdragonblood 01-22-2007 05:21 PM

I tryed your suggestions and none of them made clamd appear in chkconfig. I'm going to file a bug and post it's number along with any other relavent info that I find. Thx 4 the help.

Edit: Bugzilla Bug 223906 if anyone is interested.


All times are GMT -5. The time now is 03:20 AM.