[clamav-users] running freshclam and 3rd party/clamav-unofficial-sigs.sh owner name changes occasionally

[G.W. Haywood]

Hi there,

On Mon, 12 Jul 2021, Robert Kudyba wrote:

> ls -l / | grep var
> ...
> drwxr-xr-x.  23 root root    4096 Jan 11 14:49 var
> ...
> ls -l /var | grep lib
> drwxr-xr-x. 95 root root 4096 Mar 20 08:00 lib

OK (assuming that you're *really* not using SELinux nor anything like it).

> ... /var/log/clam_perms.log ... populating for a couple of hours.

OK, we wait. :)

> grep clam /etc/passwd
> clamilt:x:989:985:Clamav Milter User:/var/run/clamav-milter:/sbin/nologin
> clamav:x:985:981::/var/run/clamav:/sbin/nologin
> clamupdate:x:983:979:Clamav database update user:/var/lib/clamav:/sbin/nologin
> clamscan:x:982:978:Clamav scanner user:/:/sbin/nologin

Interesting.  The 'clamav' user seems not to have been created by the
same setup process which created the other three, since it didn't get
a text description.  There's a suspicious gap in the numeric IDs from
985:981 to 989:985 like the milter IDs were added later.  Make sense?

What does

grep clam /etc/group

give you?

-- 

73,
Ged.