The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Problem with internal logger - freshclam.log

Discussion in 'Security' started by Fireminds Ltd., Jun 12, 2017.

Tags:
  1. Fireminds Ltd.

    Joined:
    Feb 22, 2017
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hamilton, Bermuda
    cPanel Access Level:
    Root Administrator
    Hi All,

    I know its ANOTHER one of these threads but I read a few which did not resolve my issue.

    As per the advice in this thread (Problem with internal logger CLAMAV) I've updated the permissions on my freshclam.log file:

    Access: (0640/-rw-r-----) Uid: ( 501/ clamav) Gid: ( 501/ clamav)

    Issue now is when I manually run 'freshclam' it still gives me the error:

    ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
    ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

    I ran /scripts/restartsrv_clamd to restart the clamd service, hoping it would take the new permissions..... did not work.

    Any thoughts on how to get rid of this annoying issue?! Thanks!
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Check to see if you have multiple instances of ClamAV installed on the system using commands such as:

    Code:
    rpm -qa|grep clam
    which freshclam
    You can run "freshclam" with the cPanel provided ClamAV instance using the following command:

    Code:
    /usr/local/cpanel/3rdparty/bin/freshclam
    Thank you.
     
  3. Fireminds Ltd.

    Joined:
    Feb 22, 2017
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hamilton, Bermuda
    cPanel Access Level:
    Root Administrator
    rpm -qa | grep clam:
    clamav-0.99.2-2.el6.x86_64
    cpanel-clamav-virusdefs-0.99.2-1.cp1164.x86_64
    clamav-db-0.99.2-2.el6.x86_64
    cpanel-clamav-0.99.2-1.cp1164.x86_64

    Yup looks like theres 2 versions.

    Would it be safe to say

    These go together:
    clamav-0.99.2-2.el6.x86_64
    clamav-db-0.99.2-2.el6.x86_64

    And these go together:
    cpanel-clamav-0.99.2-1.cp1164.x86_64
    cpanel-clamav-virusdefs-0.99.2-1.cp1164.x86_64

    which version would you suggest to uninstall?
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You'd remove these RPMs, as they are unrelated to the cPanel ClamAV plugin. Once you do that, you may want to browse to "WHM >> Manage Plugins" and uninstall/install the cPanel ClamAV plugin to ensure it's properly installed.

    Thank you.
     
  5. Fireminds Ltd.

    Joined:
    Feb 22, 2017
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hamilton, Bermuda
    cPanel Access Level:
    Root Administrator
    I've proceeded to uninstall which looks to have been successful thus far.... uninstalled/reinstalled ClamAV from wHM interface as well. Thanks for the suggestion.

    One last question, where would the log for the cPanel ClamAV be?
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    ClamAV email activity is logged to /var/log/exim_mainlog and File Manager activity is logged to /usr/local/cpanel/logs/access_log.

    Thank you.
     
Loading...

Share This Page