Every time the Danguardian log rotation happens the permissions on access.log get changed to user "root" group "adm", leaving Dansguardian DGAV unable to access the file (as it runs as "clamav") and therefore continue logging. Reproducible: Always Steps to Reproduce: 1. Install Dansguardian DGAV. 2. Wait a day for the log file to get rotated 3. Actual Results: As above Expected Results: Kept the log file accessible to DGAV. I have at least one other server with a similar configuration but it doesn't happen there, in fact the log rotation isn't happening at all for Dansguardian on that server and the log file is forever expanding. Portage 2.0.51.22-r3 (default-linux/x86/2005.1, gcc-3.3.6, glibc-2.3.5-r2, 2.6.14-gentoo-r2 i686) ================================================================= System uname: 2.6.14-gentoo-r2 i686 Intel(R) Celeron(R) CPU 3.06GHz Gentoo Base System version 1.6.13 ccache version 2.3 [enabled] dev-lang/python: 2.3.5, 2.4.2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.20 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O3 -march=pentium4 -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O3 -march=pentium4 -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://ftp.heanet.ie/pub/gentoo/ ftp://ftp.heanet.ie/pub/gentoo/ http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo/ ftp://ftp.mirrorservice.org/sites/www.ibiblio.org/gentoo/ " MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="x86 berkdb bitmap-fonts bzip2 ccache crypt curl eds gdbm idn jikes libwww ncurses nls nptl nptlonly pam pcre perl png python readline snortsam source sse ssl tcpd truetype truetype-fonts type1-fonts udev zlib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY
I suppose your /etc/logrotate.conf impose this user/group. Anyway, in dansguardian-dgav-6.4.3-r1 (and dansguardian-2.8.0.6-r1) the logrotate config file has been changed. This version does not allow logrotate to create the empty new log.
