Hi Ged,

The ClamAV was installed in the oracle server two years ago. The clamd@scan.service could be started and running for a long time. The following output is from the command of "clamconf -n" in the oracle server. Please help me confirm if it could find the cause. Thanks.

[root@tplinuxuhgdb2 clamd.d]# clamconf -n
Checking configuration files in /etc

Config file: clamd.d/scan.conf
------------------------------
LogSyslog = "yes"
User = "clamscan"

Config file: freshclam.conf
---------------------------
DatabaseMirror = "database.clamav.net"

mail/clamav-milter.conf not found

Software settings
-----------------
Version: 0.103.2
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06 BZIP2 LIBXML2 PCRE2 ICONV JSON

Database information
--------------------
Database directory: /var/lib/clamav
daily.cld: version 26202, sigs: 3989629, built on Tue Jun 15 19:21:24 2021
bytecode.cld: version 333, sigs: 92, built on Mon Mar 8 23:21:51 2021
main.cld: version 59, sigs: 4564902, built on Mon Nov 25 21:56:15 2019
bytecode.cvd: version 333, sigs: 92, built on Mon Mar 8 23:21:51 2021
main.cvd: version 59, sigs: 4564902, built on Mon Nov 25 21:56:15 2019
Total number of signatures: 13119617

Platform information
--------------------
uname: Linux 4.1.12-124.27.1.el7uek.x86_64 #2 SMP Mon May 13 08:56:17 PDT 2019 x86_64
OS: linux-gnu, ARCH: x86_64, CPU: x86_64
zlib version: 1.2.7 (1.2.7), compile flags: a9
platform id: 0x0a217b7b0800000000040805

Build information
-----------------
GNU C: 4.8.5 20150623 (Red Hat 4.8.5-44) (4.8.5)
CPPFLAGS: -I/usr/include/libprelude
CFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -fno-strict-aliasing -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
CXXFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic
LDFLAGS: -Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,--as-needed -lprelude
Configure: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--enable-milter' '--disable-clamav' '--disable-static' '--disable-zlib-vcheck' '--disable-unrar' '--enable-id-check' '--enable-dns' '--with-dbdir=/var/lib/clamav' '--with-group=clamupdate' '--with-user=clamupdate' '--disable-rpath' '--disable-silent-rules' '--enable-clamdtop' '--enable-prelude' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CXXFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,--as-needed' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
sizeof(void*) = 8
Engine flevel: 123, dconf: 123
[root@tplinuxuhgdb2 clamd.d]#

BR,

Eric.

G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> 於 2021年6月15日週二下午11:15寫道：

Hi there,

On Tue, 15 Jun 2021, Eric Jin via clamav-users wrote:
> G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> 於 2021年6月15日週二下午6:40寫道：
>> On Tue, 15 Jun 2021, Eric Jin via clamav-users wrote:
>>> G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> 於 2021年6月15日週二下午6:10寫道：
>>>> On Tue, 15 Jun 2021, Eric Jin via clamav-users wrote:
>>>>
>>>>> I can't start the clamd@scan.service and get the following error.
>>>>> Please help to resolve it. Thanks.
>>>>> [image: image.png]
>>>>
>>>> Please provide enough information for us to be able to help.
>>>> For the kind of information needed, please see for example the list at
>>>> https://marc.info/?l=clamav-users&m=162228807001569&w=2
>>>
>>> The ClamAV is running in the Oracle Linux Server release 7.6 and its
>>> version is clamav.x86_64 0:0.103.2-1.el7.
>>
>> Items 3, 5 and 6 on the list?
>
> I finished the installation and configuration according to these commands
> in the link:https://www.opencli.com/linux/rhel-centos-install-clamav.

The first word in both items 5 and 6 on the list is "exactly".

Unfortunately my Web browser cannot properly render the page at the
location which you gave. Even if it did, as those instructions are
written largely in a language which I cannot read, I cannot tell how
closely they resemble the official documentation. You say you have
Oracle Linux, but the instructions appear to be for RHEL/CentOS. You
may or may not have followed them. Altogether, it doesn't help much.

To install from source, the official documentation is at

https://www.clamav.net/documents/installation-on-redhat-and-centos-linux-distributions

The documentation for installation from Fedora etc. packages can be
found by following the links at

https://www.clamav.net/download.html#otherversions

The official documentation is all in English, are you able to read it?
If so perhaps you should review all the official documentation. If it
differs from the instructions which you have followed it might be best
if you undo everything you did to install and configure ClamAV in the
first instance and carefully follow the official documentation.

Please note that when they created their ClamAV packages, Red Hat and
similar distributions made what I would call some very wilful changes
to the upstream software. It is much easier to investigate problems
if, when so doing, we can at least talk about the same configuration
file names. For that reason, if you will need help, I recommend that
you follow the source installation instructions if you possibly can.
It is not difficult to install ClamAV from source. You will probably
need to install some library header files (often these are named just
as the corresponding executable packages but with the '-dev' suffix).
Another advantage of using source packages is that you can support an
older system more easily than you can with a packaged installation.

If in the meantime you can let us have the result of typing at a shell
prompt the command

clamconf -n

it might help us. Please do not post a screenshot. Please cut-and-
paste the command line and the output text directly into an email, so
that what you send is plain text, not an image.

Oracle Linux 7.6 was based on Red Hat Enterprise Linux 7. The page at

https://access.redhat.com/support/policy/updates/errata#Maintenance_Support_1_Phase

shows that even extended support for the parent distribution (RHEL7.6)
ended two weeks ago, and version 7.7 support ends just over two months
from now. Rather than attempt to prop up a retired distribution with
things like virus scanning, it's probably time to upgrade your system.

You might then also find it much easier to install and run ClamAV, as
relatively recently there have been changes in ClamAV which required
upgraded versions of some of the supporting software. Unfortunately I
am not familiar enough with the Red Hat and Oracle ways of doing
things to know if that is likely to be causing problems in your case.
The archives for this mailing list will have more information, but it
may take some effort on your part to dig it all out.

HTH

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml