<div dir="ltr"><div>Package: clamav-daemon</div><div>Version: 0.99.2+dfsg-0+deb8u2</div><div>Severity: normal</div><div><br></div><div>Dear Maintainer,</div><div><br></div><div>I'm seeing random errors which prevent clamav-daemon from processing any virus scans.</div><div><br></div><div>==> /var/log/clamav/clamav.log <==</div><div>Fri Jan 26 08:30:52 2018 -> /tmp/01dy3y0hLW: Can't create new file ERROR</div><div><br></div><div>It doesn't seem to be isolated to any specific file.  It's just happening randomly.</div><div><br></div><div>Once it triggers it will continue to error until clamav-daemon is restarted.  Once restarted it will continue to work for awhile (regardless of file type, see next sentence) and then trigger again.</div><div><br></div><div>The only thing I've upgraded recently is the recent patch of poppler.  I have only noticed this error when scanning PDFs but we process thousands of files per day and most are PDFs.  Like I said previously it continues to work for a while (even on PDFs).</div><div><br></div><div>I am on an up-to-date debian 8.x installation.</div><div><br></div><div>-- Package-specific info:</div><div>--- configuration ---</div><div>Checking configuration files in /etc/clamav</div><div><br></div><div>Config file: clamd.conf</div><div>-----------------------</div><div>LogFile = "/var/log/clamav/clamav.log"</div><div>StatsHostID = "auto"</div><div>StatsEnabled disabled</div><div>StatsPEDisabled = "yes"</div><div>StatsTimeout = "10"</div><div>LogFileUnlock disabled</div><div>LogFileMaxSize = "4294967295"</div><div>LogTime = "yes"</div><div>LogClean disabled</div><div>LogSyslog disabled</div><div>LogFacility = "LOG_LOCAL6"</div><div>LogVerbose disabled</div><div>LogRotate = "yes"</div><div>ExtendedDetectionInfo = "yes"</div><div>PidFile disabled</div><div>TemporaryDirectory disabled</div><div>DatabaseDirectory = "/var/lib/clamav"</div><div>OfficialDatabaseOnly disabled</div><div>LocalSocket = "/var/run/clamav/clamd.ctl"</div><div>LocalSocketGroup = "clamav"</div><div>LocalSocketMode = "666"</div><div>FixStaleSocket = "yes"</div><div>TCPSocket disabled</div><div>TCPAddr disabled</div><div>MaxConnectionQueueLength = "15"</div><div>StreamMaxLength = "26214400"</div><div>StreamMinPort = "1024"</div><div>StreamMaxPort = "2048"</div><div>MaxThreads = "12"</div><div>ReadTimeout = "180"</div><div>CommandReadTimeout = "5"</div><div>SendBufTimeout = "200"</div><div>MaxQueue = "100"</div><div>IdleTimeout = "30"</div><div>ExcludePath disabled</div><div>MaxDirectoryRecursion = "15"</div><div>FollowDirectorySymlinks disabled</div><div>FollowFileSymlinks disabled</div><div>CrossFilesystems = "yes"</div><div>SelfCheck = "3600"</div><div>DisableCache disabled</div><div>VirusEvent disabled</div><div>ExitOnOOM disabled</div><div>AllowAllMatchScan = "yes"</div><div>Foreground disabled</div><div>Debug disabled</div><div>LeaveTemporaryFiles disabled</div><div>User = "clamav"</div><div>AllowSupplementaryGroups disabled</div><div>Bytecode = "yes"</div><div>BytecodeSecurity = "TrustSigned"</div><div>BytecodeTimeout = "60000"</div><div>BytecodeUnsigned disabled</div><div>BytecodeMode = "Auto"</div><div>DetectPUA disabled</div><div>ExcludePUA disabled</div><div>IncludePUA disabled</div><div>AlgorithmicDetection = "yes"</div><div>ScanPE = "yes"</div><div>ScanELF = "yes"</div><div>DetectBrokenExecutables disabled</div><div>ScanMail = "yes"</div><div>ScanPartialMessages disabled</div><div>PhishingSignatures = "yes"</div><div>PhishingScanURLs = "yes"</div><div>PhishingAlwaysBlockCloak disabled</div><div>PhishingAlwaysBlockSSLMismatch disabled</div><div>PartitionIntersection disabled</div><div>HeuristicScanPrecedence disabled</div><div>StructuredDataDetection disabled</div><div>StructuredMinCreditCardCount = "3"</div><div>StructuredMinSSNCount = "3"</div><div>StructuredSSNFormatNormal = "yes"</div><div>StructuredSSNFormatStripped disabled</div><div>ScanHTML = "yes"</div><div>ScanOLE2 = "yes"</div><div>OLE2BlockMacros disabled</div><div>ScanPDF = "yes"</div><div>ScanSWF = "yes"</div><div>ScanXMLDOCS = "yes"</div><div>ScanHWP3 = "yes"</div><div>ScanArchive = "yes"</div><div>ArchiveBlockEncrypted disabled</div><div>ForceToDisk disabled</div><div>MaxScanSize = "104857600"</div><div>MaxFileSize = "26214400"</div><div>MaxRecursion = "16"</div><div>MaxFiles = "10000"</div><div>MaxEmbeddedPE = "10485760"</div><div>MaxHTMLNormalize = "10485760"</div><div>MaxHTMLNoTags = "2097152"</div><div>MaxScriptNormalize = "5242880"</div><div>MaxZipTypeRcg = "1048576"</div><div>MaxPartitions = "50"</div><div>MaxIconsPE = "100"</div><div>MaxRecHWP3 = "16"</div><div>PCREMatchLimit = "10000"</div><div>PCRERecMatchLimit = "5000"</div><div>PCREMaxFileSize = "26214400"</div><div>ScanOnAccess disabled</div><div>OnAccessMountPath disabled</div><div>OnAccessIncludePath disabled</div><div>OnAccessExcludePath disabled</div><div>OnAccessExcludeUID disabled</div><div>OnAccessMaxFileSize = "5242880"</div><div>OnAccessDisableDDD disabled</div><div>OnAccessPrevention disabled</div><div>OnAccessExtraScanning disabled</div><div>DevACOnly disabled</div><div>DevACDepth disabled</div><div>DevPerformance disabled</div><div>DevLiblog disabled</div><div>DisableCertCheck disabled</div><div><br></div><div>Config file: freshclam.conf</div><div>---------------------------</div><div>StatsHostID disabled</div><div>StatsEnabled disabled</div><div>StatsTimeout disabled</div><div>LogFileMaxSize = "4294967295"</div><div>LogTime = "yes"</div><div>LogSyslog disabled</div><div>LogFacility = "LOG_LOCAL6"</div><div>LogVerbose disabled</div><div>LogRotate = "yes"</div><div>PidFile disabled</div><div>DatabaseDirectory = "/var/lib/clamav"</div><div>Foreground disabled</div><div>Debug disabled</div><div>AllowSupplementaryGroups disabled</div><div>UpdateLogFile = "/var/log/clamav/freshclam.log"</div><div>DatabaseOwner = "clamav"</div><div>Checks = "24"</div><div>DNSDatabaseInfo = "<a href="http://current.cvd.clamav.net">current.cvd.clamav.net</a>"</div><div>DatabaseMirror = "<a href="http://db.local.clamav.net">db.local.clamav.net</a>", "<a href="http://database.clamav.net">database.clamav.net</a>"</div><div>PrivateMirror disabled</div><div>MaxAttempts = "5"</div><div>ScriptedUpdates = "yes"</div><div>TestDatabases = "yes"</div><div>CompressLocalDatabase disabled</div><div>ExtraDatabase disabled</div><div>DatabaseCustomURL disabled</div><div>HTTPProxyServer disabled</div><div>HTTPProxyPort disabled</div><div>HTTPProxyUsername disabled</div><div>HTTPProxyPassword disabled</div><div>HTTPUserAgent disabled</div><div>NotifyClamd = "/etc/clamav/clamd.conf"</div><div>OnUpdateExecute disabled</div><div>OnErrorExecute disabled</div><div>OnOutdatedExecute disabled</div><div>LocalIPAddress disabled</div><div>ConnectTimeout = "30"</div><div>ReceiveTimeout = "30"</div><div>SubmitDetectionStats disabled</div><div>DetectionStatsCountry disabled</div><div>DetectionStatsHostID disabled</div><div>SafeBrowsing disabled</div><div>Bytecode = "yes"</div><div><br></div><div>clamav-milter.conf not found</div><div><br></div><div>Software settings</div><div>-----------------</div><div>Version: 0.99.2</div><div>Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 LIBXML2 PCRE ICONV JSON JIT</div><div><br></div><div>Database information</div><div>--------------------</div><div>Database directory: /var/lib/clamav</div><div>main.cvd: version 58, sigs: 4566249, built on Wed Jun  7 16:38:10 2017</div><div>daily.cld: version 24257, sigs: 1835982, built on Fri Jan 26 03:24:57 2018</div><div>bytecode.cld: version 319, sigs: 75, built on Wed Dec  6 20:17:11 2017</div><div>Total number of signatures: 6402306</div><div><br></div><div>Platform information</div><div>--------------------</div><div>uname: Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.51-3 (2017-12-13) x86_64</div><div>OS: linux-gnu, ARCH: x86_64, CPU: x86_64</div><div>Full OS version: Debian GNU/Linux 8.10 (jessie)</div><div>zlib version: 1.2.8 (1.2.8), compile flags: a9</div><div>Triple: x86_64-pc-linux-gnu</div><div>CPU: core-avx2, Little-endian</div><div>platform id: 0x0a2152520804090201040902</div><div><br></div><div>Build information</div><div>-----------------</div><div>GNU C: 4.9.2 (4.9.2)</div><div>GNU C++: 4.9.2 (4.9.2)</div><div>CPPFLAGS: -D_FORTIFY_SOURCE=2</div><div>CFLAGS: -g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64 -fno-strict-aliasing  -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE</div><div>CXXFLAGS: </div><div>LDFLAGS: -fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--as-needed</div><div>Configure: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=/usr/lib/clamav' '--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--as-needed' '--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-libjson' '--with-gnu-ld' '-with-system-llvm=/usr/bin/llvm-config' '--with-llvm-linking=dynamic' '--with-systemdsystemunitdir=/lib/systemd/system' 'build_alias=x86_64-linux-gnu'</div><div>sizeof(void*) = 8</div><div>Engine flevel: 82, dconf: 82</div><div><br></div><div>--- data dir ---</div><div>total 244032</div><div>-rw-r--r-- 1 clamav clamav    766976 Dec  6 20:53 bytecode.cld</div><div>-rw-r--r-- 1 clamav clamav 131212800 Jan 26 03:49 daily.cld</div><div>-rw-r--r-- 1 clamav clamav 117892267 Dec  5 07:43 main.cvd</div><div>-rw------- 1 clamav clamav       624 Jan 26 07:52 mirrors.dat</div><div><br></div><div>-- System Information:</div><div>Debian Release: 8.10</div><div>  APT prefers oldstable-updates</div><div>  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')</div><div>Architecture: amd64 (x86_64)</div><div><br></div><div>Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)</div><div>Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)</div><div>Shell: /bin/sh linked to /bin/dash</div><div>Init: systemd (via /run/systemd/system)</div><div><br></div><div>Versions of packages clamav-daemon depends on:</div><div>ii  adduser                         3.113+nmu3</div><div>ii  clamav-base                     0.99.2+dfsg-0+deb8u2</div><div>ii  clamav-freshclam [clamav-data]  0.99.2+dfsg-0+deb8u2</div><div>ii  debconf [debconf-2.0]           1.5.56+deb8u1</div><div>ii  dpkg                            1.17.27</div><div>ii  init-system-helpers             1.22</div><div>ii  libc6                           2.19-18+deb8u10</div><div>ii  libclamav7                      0.99.2+dfsg-0+deb8u2</div><div>ii  libncurses5                     5.9+20140913-1+deb8u2</div><div>ii  libssl1.0.0                     1.0.1t-1+deb8u7</div><div>ii  libsystemd0                     215-17+deb8u7</div><div>ii  libtinfo5                       5.9+20140913-1+deb8u2</div><div>ii  lsb-base                        4.1+Debian13+nmu1</div><div>ii  procps                          2:3.3.9-9</div><div>ii  ucf                             3.0030</div><div>ii  zlib1g                          1:1.2.8.dfsg-2+b1</div><div><br></div><div>Versions of packages clamav-daemon recommends:</div><div>ii  clamdscan  0.99.2+dfsg-0+deb8u2</div><div><br></div><div>Versions of packages clamav-daemon suggests:</div><div>pn  apparmor     <none></div><div>pn  clamav-docs  <none></div><div>pn  daemon       <none></div><div><br></div><div>-- debconf information:</div><div>  clamav-daemon/debconf: true</div><div>  clamav-daemon/MaxHTMLNoTags: 2M</div><div>  clamav-daemon/MaxHTMLNormalize: 10M</div><div>  clamav-daemon/ScanOnAccess: false</div><div>  clamav-daemon/MaxThreads: 12</div><div>  clamav-daemon/TCPSocket: 3310</div><div>  clamav-daemon/OnAccessMaxFileSize: 5M</div><div>  clamav-daemon/LocalSocketMode: 666</div><div>  clamav-daemon/ScanArchive: true</div><div>  clamav-daemon/TcpOrLocal: UNIX</div><div>  clamav-daemon/FollowFileSymlinks: false</div><div>  clamav-daemon/SelfCheck: 3600</div><div>  clamav-daemon/DisableCertCheck: false</div><div>  clamav-daemon/FollowDirectorySymlinks: false</div><div>  clamav-daemon/LogFile: /var/log/clamav/clamav.log</div><div>  clamav-daemon/LogSyslog: false</div><div>  clamav-daemon/LocalSocket: /var/run/clamav/clamd.ctl</div><div>  clamav-daemon/StatsHostID: auto</div><div>  clamav-daemon/AllowAllMatchScan: true</div><div>  clamav-daemon/ReadTimeout: 180</div><div>  clamav-daemon/ForceToDisk: false</div><div>  clamav-daemon/StatsTimeout: 10</div><div>  clamav-daemon/Bytecode: true</div><div>  clamav-daemon/User: clamav</div><div>  clamav-daemon/MaxEmbeddedPE: 10M</div><div>  clamav-daemon/LogTime: true</div><div>  clamav-daemon/MaxScriptNormalize: 5M</div><div>  clamav-daemon/MaxZipTypeRcg: 1M</div><div>  clamav-daemon/AddGroups:</div><div>  clamav-daemon/LocalSocketGroup: clamav</div><div>  clamav-daemon/BytecodeSecurity: TrustSigned</div><div>  clamav-daemon/ScanSWF: true</div><div>  clamav-daemon/MaxDirectoryRecursion: 0</div><div>  clamav-daemon/StatsEnabled: false</div><div>  clamav-daemon/BytecodeTimeout: 60000</div><div>  clamav-daemon/LogRotate: true</div><div>  clamav-daemon/TCPAddr: any</div><div>  clamav-daemon/ScanMail: true</div><div>  clamav-daemon/MaxConnectionQueueLength: 15</div><div>  clamav-daemon/StreamMaxLength: 25</div><div>  clamav-daemon/StatsPEDisabled: true</div><div>  clamav-daemon/FixStaleSocket: true</div><div><br></div></div>