Simon Banton wrote:
Every day I see in logwatch that my signatures are updated, and the database notified, but if I try to scan a file manually it tells me that my signatures are 55 days old.
I think clamscan looks for the db files in a compiled-in default location of /usr/local/share/clamav and doesn't consult the clamd.conf or freshclam.conf files (after all, why would it?)
It does at least open freshclam.conf (which means that that one must be *readable* by the user running clamscan:
admin@mail-gw-3:~$strace -eopen clamscan open("/etc/ld.so.cache", O_RDONLY) = 3 open("/usr/lib/libclamav.so.4", O_RDONLY) = 3 open("/lib/tls/libpthread.so.0", O_RDONLY) = 3 open("/lib/tls/libc.so.6", O_RDONLY) = 3 open("/usr/lib/libz.so.1", O_RDONLY) = 3 open("/usr/lib/libbz2.so.1", O_RDONLY) = 3 open("/usr/lib/sse2/libgmp.so.3", O_RDONLY) = 3 open("/usr/lib/libclamunrar_iface.so.4", O_RDONLY) = 3 open("/usr/lib/libclamunrar.so.4", O_RDONLY) = 3 open("/etc/freshclam.conf", O_RDONLY) = 3 open("/var/clamav/daily.cld", O_RDONLY) = 3
Cheers,
Ralph