[ZendTo] Error: Virus scan of dropped-off files

[Marlon Deerr]

@Scott Silva,

I was digging around some more and found a similar response online. I added 'capablity chown' to /etc/apparmor.d/usr.sbin.clamd and rebooted. Now services are up and running again.

Not sure why that failed to begin with. Happened right after I upgraded from v6.09 to v6.11-2

All is well now. Many thanks to those who responded.



-----Original Message-----
From: ZendTo [mailto:zendto-bounces at zend.to] On Behalf Of Scott Silva via ZendTo
Sent: Thursday, September 30, 2021 1:50 PM
To: ZendTo Users <zendto at zend.to>
Cc: Scott Silva <ssilva at sgvwater.com>
Subject: Re: [ZendTo] Error: Virus scan of dropped-off files

Try this...
The line: capability chown,  
Is needed to be included in 
/etc/apparmor.d/usr.sbin.clamd

-----Original Message-----
From: ZendTo <zendto-bounces at zend.to> On Behalf Of Marlon Deerr via ZendTo
Sent: Thursday, September 30, 2021 10:42 AM
To: ZendTo Users <zendto at zend.to>
Cc: Marlon Deerr <MDeerr at hshlawyers.com>
Subject: Re: [ZendTo] Error: Virus scan of dropped-off files

Keith,

Many thanks for your response. See my response below when I check the status of clamav-daemon as you suggested. Is this a permissions issue as indicated by "Operation not permitted"?

systemd[1]: Starting Clam AntiVirus userspace daemon...
systemd[1]: Started Clam AntiVirus userspace daemon.
clamd[1807]: ERROR: lchown to user 'clamav' failed on
clamd[1807]: log file '/var/log/clamav/clamav.log'.
clamd[1807]: Error was 'Operation not permitted'
[1807]: Tue Sep 28 12:01:07 2021 -> ^lchown to user 'clamav' failed on log file '/var/log/clamav/clamav.log'.  Error was 'Operation not permitted'
[1]: clamav-daemon.service: Main process exited, code=exited, status=1/FAILURE
[1]: clamav-daemon.service: Failed with result 'exit-code'.

-----Original Message-----
From: Keith Erekson [mailto:kbe2 at lehigh.edu] 
Sent: Thursday, September 30, 2021 12:36 PM
To: ZendTo Users <zendto at zend.to>
Cc: Marlon Deerr <MDeerr at hshlawyers.com>
Subject: Re: [ZendTo] Error: Virus scan of dropped-off files

This error suggests that clamd isn't actually running.

Running something like "service clamav-daemon status" or "systemctl status clamav-daemon" will hopefully show you some information about why it's not running.

It might be as simple as just starting the daemon, and/or enabling it to start at boot.

~Keith

On 9/30/21 9:52 AM, Marlon Deerr via ZendTo wrote:
> ERROR: Could not connect to clamd on LocalSocket
> /var/run/clamav/clamd.ctl: No such file or directory

_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://jul.es/mailman/listinfo/zendto

_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://jul.es/mailman/listinfo/zendto