Red Hat Bugzilla – Bug 842180
Permission denied updating clamav-unofficial-sigs
Last modified: 2012-08-24 23:04:10 EDT
Description of problem:
Clamav-unofficial-sigs does not update their sigs, which can completelly disable clamav.
Version-Release number of selected component (if applicable):
always on fc16 and fc17
Steps to Reproduce:
1. su - clamupdate -s /bin/bash
chmod: changing permissions of `/var/lib/clamav-unofficial-sigs/gpg-key': Operation not permitted
curl: (23) Failed writing body (0 != 1762)
Could not download Sanesecurity public GPG key
Looks like permissions on /var/lib/clamav-unofficial-sigs/* are bad:
-bash-4.2$ ls -la /var/lib/clamav-unofficial-sigs/
drwxr-xr-x. 9 clamupdate clamupdate 4096 Jul 22 22:58 .
drwxr-xr-x. 65 root root 4096 Jun 29 04:41 ..
drwxr-xr-x. 2 root root 4096 Oct 4 2011 add-dbs
drwxr-xr-x. 2 root root 4096 Oct 4 2011 configs
drwx------. 2 root root 4096 Oct 4 2011 gpg-key
drwxr-xr-x. 2 clamupdate clamupdate 4096 Jan 13 2012 ham-test
drwxr-xr-x. 2 root root 4096 Oct 4 2011 mbl-dbs
drwxr-xr-x. 2 root root 4096 Oct 4 2011 si-dbs
drwxr-xr-x. 2 root root 4096 Oct 4 2011 ss-dbs
Clamupdate user has no access to these directories, unable to read gpg keys, but also unable to update them.
These sigs are not updated and does not work for me. On some systems I have similar problem with /var/log/clamav-unofficial-sigs/*.log files.
Clamav on some systems complettely stopped working, because it can't load some broken or obsolete sigs.
clamav-unofficial-sigs-3.7.1-7.fc17 has been submitted as an update for Fedora 17.
clamav-unofficial-sigs-3.7.1-6.fc16 has been submitted as an update for Fedora 16.
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing clamav-unofficial-sigs-3.7.1-7.fc17'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
clamav-unofficial-sigs-3.7.1-6.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.
clamav-unofficial-sigs-3.7.1-7.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.