On Wednesday 18 June 2008 12:36:20 Ralph Angenendt wrote: > Anne Wilson wrote: > > freshclam.conf was root:root, so I've fixed that. Running your strace > > command gives me > > > > strace -eopen clamscan > > open("/etc/freshclam.conf", O_RDONLY) = 3 > > open("/var/clamav/daily.cld", O_RDONLY) = 3 > > open("/var/clamav", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3 > > open("/var/clamav/main.cvd", O_RDONLY) = 4 > > So it opened freshclam.conf and then proceeded to read the database > which is kept fresh by freshclam. > > > The message about signatures being ancient comes from ClamTK virus > > scanner. Maybe there's some connection there that needs fixing? > > I have no idea about ClamTK - so yes, that might be the problem. No idea > where that looks >:) > OK, thanks. I'll do some googling. As far as I can remember, it was installed along with the rest from rpmforge. I'm certain I didn't download it from any other than my installed repos. As far as you can tell, then, clamav is working correctly? That's a comfort. Thanks for your help. Anne -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: This is a digitally signed message part. URL: <http://lists.centos.org/pipermail/centos/attachments/20080618/6fa8bb5a/attachment-0005.sig>