Hi,

we are using the ClamAV from the Toolbox - clamav-0.104.2-1.ppc - and our problem is that when we scan the system on a daily basis, the /var filesystem is running full. Because of masses of temporary scan files in directories like:

/var/tmp:
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.6573a6de73
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.69f993fadb
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9c4acda2c1
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9f4e7694e3
... today I had more than 7200 of those.

The default for this behaviour in /etc/clamd.conf would be that those files should be deleted. Which works fine on all our Linux systems with the same settings.
On all AIX systems the files still exist and we have to delete them ourselves. And before I write a script to do that job we should try to find the bug.

We also tried to set the parameter as the default should be - here the part in /etc/clamd.conf:

# Do not remove temporary files (for debug purposes).
# Default: no
#LeaveTemporaryFiles yes
LeaveTemporaryFiles no                                  <= I set this although it should be the default. But it does not work.

Can You please check that and maybe there was a problem when You compiled clamav.

Thanks
Martin

------------------------------
Opensource the Planet ;-)
------------------------------

#AIXOpenSource

AIX Toolbox Clamav looks for the conf file inside "/opt/freeware/etc/clamav" directory.
You can copy the config file in the above mentioned directory and try again. 

------------------------------
Ayappan P
------------------------------

Original Message:
Sent: Mon August 08, 2022 03:44 AM
From: Martin Rödlach
Subject: ClamAV does not delete temporary files on AIX

Hi,

we are using the ClamAV from the Toolbox - clamav-0.104.2-1.ppc - and our problem is that when we scan the system on a daily basis, the /var filesystem is running full. Because of masses of temporary scan files in directories like:

/var/tmp:
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.6573a6de73
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.69f993fadb
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9c4acda2c1
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9f4e7694e3
... today I had more than 7200 of those.

The default for this behaviour in /etc/clamd.conf would be that those files should be deleted. Which works fine on all our Linux systems with the same settings.
On all AIX systems the files still exist and we have to delete them ourselves. And before I write a script to do that job we should try to find the bug.

We also tried to set the parameter as the default should be - here the part in /etc/clamd.conf:

# Do not remove temporary files (for debug purposes).
# Default: no
#LeaveTemporaryFiles yes
LeaveTemporaryFiles no                                  <= I set this although it should be the default. But it does not work.

Can You please check that and maybe there was a problem when You compiled clamav.

Thanks
Martin

------------------------------
Opensource the Planet ;-)
------------------------------

#AIXOpenSource

Sorry, I forgot to mention that I already made a link. 
The original config file in our installation is /etc/clamd.conf and I created a link /opt/freeware/etc/clamav/clamd.conf pointing to that. Because I already saw that months ago.

And the most important part is - my script starts the scan with the following:

/opt/freeware/bin/clamdscan --config-file=/etc/clamd.conf  <directory>

So, this should definitely work ;-)  Maybe You can reproduce that Yourself.

Thanks
Martin


------------------------------
Opensource the Planet ;-)
------------------------------

Original Message:
Sent: Mon August 08, 2022 10:07 AM
From: Ayappan P
Subject: ClamAV does not delete temporary files on AIX

AIX Toolbox Clamav looks for the conf file inside "/opt/freeware/etc/clamav" directory.
You can copy the config file in the above mentioned directory and try again. 

------------------------------
Ayappan P

Original Message:
Sent: Mon August 08, 2022 03:44 AM
From: Martin Rödlach
Subject: ClamAV does not delete temporary files on AIX

Hi,

we are using the ClamAV from the Toolbox - clamav-0.104.2-1.ppc - and our problem is that when we scan the system on a daily basis, the /var filesystem is running full. Because of masses of temporary scan files in directories like:

/var/tmp:
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.6573a6de73
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.69f993fadb
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9c4acda2c1
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9f4e7694e3
... today I had more than 7200 of those.

The default for this behaviour in /etc/clamd.conf would be that those files should be deleted. Which works fine on all our Linux systems with the same settings.
On all AIX systems the files still exist and we have to delete them ourselves. And before I write a script to do that job we should try to find the bug.

We also tried to set the parameter as the default should be - here the part in /etc/clamd.conf:

# Do not remove temporary files (for debug purposes).
# Default: no
#LeaveTemporaryFiles yes
LeaveTemporaryFiles no                                  <= I set this although it should be the default. But it does not work.

Can You please check that and maybe there was a problem when You compiled clamav.

Thanks
Martin

------------------------------
Opensource the Planet ;-)
------------------------------

#AIXOpenSource

Thank you Martin for reporting, We will verify this.

------------------------------
SANKET RATHI
------------------------------

Original Message:
Sent: Mon August 08, 2022 10:21 AM
From: Martin Rödlach
Subject: ClamAV does not delete temporary files on AIX

Sorry, I forgot to mention that I already made a link. 
The original config file in our installation is /etc/clamd.conf and I created a link /opt/freeware/etc/clamav/clamd.conf pointing to that. Because I already saw that months ago.

And the most important part is - my script starts the scan with the following:

/opt/freeware/bin/clamdscan --config-file=/etc/clamd.conf  <directory>

So, this should definitely work ;-)  Maybe You can reproduce that Yourself.

Thanks
Martin


------------------------------
Opensource the Planet ;-)

Original Message:
Sent: Mon August 08, 2022 10:07 AM
From: Ayappan P
Subject: ClamAV does not delete temporary files on AIX

AIX Toolbox Clamav looks for the conf file inside "/opt/freeware/etc/clamav" directory.
You can copy the config file in the above mentioned directory and try again. 

------------------------------
Ayappan P

Original Message:
Sent: Mon August 08, 2022 03:44 AM
From: Martin Rödlach
Subject: ClamAV does not delete temporary files on AIX

Hi,

we are using the ClamAV from the Toolbox - clamav-0.104.2-1.ppc - and our problem is that when we scan the system on a daily basis, the /var filesystem is running full. Because of masses of temporary scan files in directories like:

/var/tmp:
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.6573a6de73
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.69f993fadb
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9c4acda2c1
drwx------ 3 root system 256 Aug 7 19:02 20220807_190204-scantem.9f4e7694e3
... today I had more than 7200 of those.

The default for this behaviour in /etc/clamd.conf would be that those files should be deleted. Which works fine on all our Linux systems with the same settings.
On all AIX systems the files still exist and we have to delete them ourselves. And before I write a script to do that job we should try to find the bug.

We also tried to set the parameter as the default should be - here the part in /etc/clamd.conf:

# Do not remove temporary files (for debug purposes).
# Default: no
#LeaveTemporaryFiles yes
LeaveTemporaryFiles no                                  <= I set this although it should be the default. But it does not work.

Can You please check that and maybe there was a problem when You compiled clamav.

Thanks
Martin

------------------------------
Opensource the Planet ;-)
------------------------------

#AIXOpenSource