[clamav-users] freshclam leaving files in /tmp

Duncan Berriman duncan at berrimans.co.uk
Tue Sep 29 12:30:44 UTC 2020


Good point. I will sort it out.

Perhaps the example conf files should use/suggest a better location.

<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.
www.avg.com
<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Tue, Sep 29, 2020 at 1:09 PM Michael Orlitzky via clamav-users <
clamav-users at lists.clamav.net> wrote:

> On 2020-09-29 07:18, Duncan Berriman via clamav-users wrote:
> > Hi,
> >
> > Each time freshclam runs automatically via clamd it is leaving 2
> > temporary files in /tmp.
> >
> > -rw-------   1 root   root         0 Sep 29 09:17 tmp.UdjG3Qnk4E
> > ...
> > srw-rw-rw-   1 root   root         0 Sep 29 11:00 clamd.socket
> > -rw-r-----   1 clamav clamav     377 Sep 29 11:11 ClamAV.update.log
> >
>
> Off-topic: you shouldn't use /tmp for the clamd socket, or anything else
> with a predictable name (that's why all the other tmp.* files have
> "random" names). Anyone on the machine can create (and thus own) that
> file after the machine reboots, leading to security issues.
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20200929/f2989103/attachment.htm>


More information about the clamav-users mailing list