[clamav-users] clamav-milter Can't Find Clamd

[Reindl Harald]

Am 07.11.2017 um 22:46 schrieb Colony.three:
> So much for that theory.  There are about a million of these in the logfile.  It's not making its own socket for unknown reasons which may be New To Science.

well, that looks like clamd is restarted again and again because it's 
failing, most likely /run/clamd.scan/ don't exist or has the wrong 
permissions

"systemctl status" as well as the syslogs should tell you that the 
service is failing if you just look at it

are you aware that /run is a tmpfs and hence anything below does not 
survive a reboot?

[root at mail-gw:~]$ cat /etc/tmpfiles.d/clamd.scan.conf
d /run/clamd 0775 clamscan clamilt

https://www.freedesktop.org/software/systemd/man/tmpfiles.d.html


> Tue Nov  7 13:41:54 2017 -> ERROR: LOCAL: Socket file /run/clamd.scan/clamd.sock could not be bound: No such file or directory
> Tue Nov  7 13:41:55 2017 -> +++ Started at Tue Nov  7 13:41:55 2017
> Tue Nov  7 13:41:55 2017 -> Received 0 file descriptor(s) from systemd.
> Tue Nov  7 13:41:55 2017 -> clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
> Tue Nov  7 13:41:55 2017 -> Running as user root (UID 0, GID 0)
> Tue Nov  7 13:41:55 2017 -> Log file size limited to 2097152 bytes.
> Tue Nov  7 13:41:55 2017 -> Reading databases from /var/lib/clamav
> Tue Nov  7 13:41:55 2017 -> Not loading PUA signatures.
> Tue Nov  7 13:41:55 2017 -> Bytecode: Security mode set to "TrustSigned".
> Tue Nov  7 13:42:04 2017 -> Loaded 6474764 signatures.
> Tue Nov  7 13:42:06 2017 -> ERROR: LOCAL: Socket file /run/clamd.scan/clamd.sock could not be bound: No such file or directory
> Tue Nov  7 13:42:07 2017 -> +++ Started at Tue Nov  7 13:42:07 2017