Anne Wilson wrote: > freshclam.conf was root:root, so I've fixed that. Running your strace command > gives me > > strace -eopen clamscan > open("/etc/freshclam.conf", O_RDONLY) = 3 > open("/var/clamav/daily.cld", O_RDONLY) = 3 > open("/var/clamav", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3 > open("/var/clamav/main.cvd", O_RDONLY) = 4 So it opened freshclam.conf and then proceeded to read the database which is kept fresh by freshclam. > The message about signatures being ancient comes from ClamTK virus scanner. > Maybe there's some connection there that needs fixing? I have no idea about ClamTK - so yes, that might be the problem. No idea where that looks >:) Cheers, Ralph -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20080618/a9e799a5/attachment-0005.sig>