[clamav-users] temporary directories left in /var/lib/clamav
Steven Morgan
smorgan at sourcefire.com
Mon Jun 19 17:15:15 UTC 2017
Hi,
Any temporary files left by "normal" ClamAV processing is considered to be
a bug. Temporary files may be left if a ClamAV component terminates
ungracefully. Do you have any other logs or know of any other events from
June 3 that may provide additional info about these files left in the temp
directory?
Steve
On Mon, Jun 19, 2017 at 8:01 AM, David Pullman <david.pullman at gmail.com>
wrote:
> Hi,
>
> We're seeing cases on some servers where tmp directories are possibly being
> left behind in /var/lib/clamav. The following is one example, there are
> some where more than one tmp dir is occurring.
>
> Is this a sign of a failure to clean up after a download? Is there
> something I can check in logs or in configuration regarding this? Or is it
> simply a need to run a clean up process?
>
> Thanks very much!
>
> David
>
> $ ls -alR /var/lib/clamav/clamav-12a37b16fb99966eac0b8cc6f66d5d8c.tmp/
> /var/lib/clamav/clamav-12a37b16fb99966eac0b8cc6f66d5d8c.tmp/:
> total 12
> drwxr-xr-x 3 clamav clamav 4096 Jun 19 11:16 .
> drwxr-xr-x 3 clamav clamav 4096 Jun 19 00:05 ..
> drwxr-xr-x 2 clamav clamav 4096 Jun 3 00:03
> clamav-6ef20391b3924221fc3fce4a535e157e.tmp
>
> /var/lib/clamav/clamav-12a37b16fb99966eac0b8cc6f66d5d8c.tmp/clamav-
> 6ef20391b3924221fc3fce4a535e157e.tmp:
> total 145216
> drwxr-xr-x 2 clamav clamav 4096 Jun 3 00:03 .
> drwxr-xr-x 3 clamav clamav 4096 Jun 19 11:16 ..
> -rw-r--r-- 1 clamav clamav 17992 Jun 3 00:03 COPYING
> -rw-r--r-- 1 clamav clamav 557 Jun 3 00:03 daily.cdb
> -rw-r--r-- 1 clamav clamav 424 Jun 3 00:03 daily.cfg
> -rw-r--r-- 1 clamav clamav 6040 Jun 3 00:03 daily.crb
> -rw-r--r-- 1 clamav clamav 26043 Jun 3 00:03 daily.fp
> -rw-r--r-- 1 clamav clamav 9965 Jun 3 00:03 daily.ftm
> -rw-r--r-- 1 clamav clamav 29125847 Jun 3 00:03 daily.hdb
> -rw-r--r-- 1 clamav clamav 3530 Jun 3 00:03 daily.hdu
> -rw-r--r-- 1 clamav clamav 112488731 Jun 3 00:03 daily.hsb
> -rw-r--r-- 1 clamav clamav 89 Jun 3 00:03 daily.hsu
> -rw-r--r-- 1 clamav clamav 36126 Jun 3 00:03 daily.idb
> -rw-r--r-- 1 clamav clamav 5709 Jun 3 00:03 daily.ign
> -rw-r--r-- 1 clamav clamav 4235 Jun 3 00:03 daily.ign2
> -rw-r--r-- 1 clamav clamav 2271 Jun 3 00:03 daily.info
> -rw-r--r-- 1 clamav clamav 849664 Jun 3 00:03 daily.ldb
> -rw-r--r-- 1 clamav clamav 199116 Jun 3 00:03 daily.ldu
> -rw-r--r-- 1 clamav clamav 4847600 Jun 3 00:03 daily.mdb
> -rw-r--r-- 1 clamav clamav 69427 Jun 3 00:03 daily.mdu
> -rw-r--r-- 1 clamav clamav 92 Jun 3 00:03 daily.msb
> -rw-r--r-- 1 clamav clamav 92 Jun 3 00:03 daily.msu
> -rw-r--r-- 1 clamav clamav 97624 Jun 3 00:03 daily.ndb
> -rw-r--r-- 1 clamav clamav 823647 Jun 3 00:03 daily.ndu
> -rw-r--r-- 1 clamav clamav 4094 Jun 3 00:03 daily.pdb
> -rw-r--r-- 1 clamav clamav 87 Jun 3 00:03 daily.sfp
> -rw-r--r-- 1 clamav clamav 10095 Jun 3 00:03 daily.wdb
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
More information about the clamav-users
mailing list