The freshclam component of the clamav package fails to update the virus database if the main mirror is down, since the hostname is hard coded into the binary. There is a new version that switches between the different mirrors at http://clamav.ozforces.com/clamav-20030605.tar.gz Reproducible: Always Steps to Reproduce: 1. Install calmav 2. Run freshcalm Actual Results: can't connect to port 80 of calmav.elektrapro.com. Expected Results: updates clamav's virus database. the whole webserver server for elektrapro.com seems to be offline and unforutinatly all of the mailing lists for clamav are hosted on or with elektrapro.com
This has been resolved with the advent of 0.60 - which needs testing before it is unmasked.
Preston, while you are at it, could please move /usr/share/clamav to /var/something/clamav??? My /usr ir RO and freshclam fails. Thank you, Norberto
Clamav-0.60 seems to have one or two issues: -------------------------------------------- 1) clamd when started drops from the root user to clamav and then tries to write the pid file to /var/run/clamd.pid. This is easily remedied by creating a /var/run/clamav directory and changing the perms so that clamav can write to it. The /etc/init.d/clamd stop() function needs to be changed to reflect this move. The /etc/clamav.conf file needs to be changed to reflect this move too. 2) Shouldn't the virus dbs be kept in /usr/lib/clamav as opposed to /usr/share/clamav? The permissions on /usr/lib/clamav are not correct. Freshclam drop to a compile time specified user (clamav) when it runs. This user needs permission to write to this directory in order for it to download antivirus updates.
Any progress on this one? The host used by freshclam (clamav.linux-sxs.org) is out of date and it seems freshclam (0.60) doesn't switch to other mirrors...
In connection with Norberto Bensa's comment: The new virus db URL is: http://clamav.sourceforge.net/database/
> Shouldn't the virus dbs be kept in /usr/lib/clamav as opposed to /usr/share/clamav? it should be /var/lib/clamav
Update to 0.65 should help. I also changed the location of the virus-db to /var to be compliant to the FHS.
