Freshclam error

[ericovk]

I keep getting this strange error on one of my servers:

/etc/cron.daily/freshclam:


ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).

All seems fine, so I can't find the cause of this error message.

Permissions seems okay:

-rw-r--r-- 1 clam clam 0 Oct  7 03:45 /var/log/clamav/freshclam.log

 

[zEitEr]

Hello,

Behalf of what user are freshclam and/or clamd running? Is it clam? Or other? Check settings and ps aux​ output.

 

[ericovk]

Hi Alex,

Do you mean:

# ps aux | grep freshclam
clamav    7427  0.0  0.0  74844  1672 ?        Ss   Sep06  11:14 /usr/local/bin/freshclam -d

I tried to chown the damn /var/log/clamav/freshclam.log to clamav:clamav, but the system is changing it back to clam:clam.

 

[zEitEr]

You need to update clamav and freshclam configs and bring them into a consistency on what username to use. Check and update them under /etc/ directory.

 

[ericovk]

I don't know how to do so. I changed:

/etc/freshclam.conf:

DatabaseOwner clamav

and

/etc/clamav.conf

User clamav

Besides that I also changed ownership of /var/log/clamav/freshclam.log to clamav:clamav

 

[zEitEr]

Read the comments, they are enough helpful. If it still something that scares you, then I'd suggest that you hire somebody to fix it for you.