Running ClamAV 103.0-1 on Fedora, I have freshclam and clamav-unofficial-sigs.sh from https://github.com/extremeshok/clamav-unofficial-sigs
Every few weeks I'll start seeing this error:
ERROR: clam database directory (clam_dbs) not writable /var/lib/clamav
Running this fixes it:
su clamav -s '/usr/local/sbin/clamav-unofficial-sigs.sh'
Here are the files not owned by clamav:
-rw-r--r-- 1 clamupdate clamupdate 296388 Sep 19 2019 bytecode.cvd
-rw-r--r-- 1 clamupdate clamupdate 112832258 Sep 17 09:53 daily.cvd
-rw-r--r-- 1 clamupdate clamupdate 117859675 Nov 25 2019 main.cvd
In /etc/freshclam.conf I have:
DatabaseDirectory /var/lib/clamav
DatabaseOwner clamav
And in ExtremeSHOK I have these settings:
/etc/clamav-unofficial-sigs/user.conf:clam_user="clamav"
/etc/clamav-unofficial-sigs/user.conf:clam_group="clamav"
/etc/clamav-unofficial-sigs/master.conf:clam_user="clamav"
/etc/clamav-unofficial-sigs/master.conf:clam_group="clamav"
Clamd setting:
/etc/clamd.d/scan.conf:User clamav
ps -auwx|grep -i clam
clamav 937639 0.3 1.5 2464352 1981128 ? Ssl 04:45 1:06 /usr/sbin/clamd -c /etc/clamd.d/scan.conf
clamav 937912 0.0 0.0 27856 12772 ? Ss 04:46 0:00 /usr/bin/freshclam -d --foreground=true
clamilt 938023 0.0 0.0 249988 1448 ? Ssl 04:46 0:00 /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf
I've tried grepping for the clamupdate user in all the .conf files and anywhere it appears it's commented out. Any other places to look?