KVM virtualisation
CentOS 7.6.1810
New install no email accounts
After noticing clamscam consistently using 90 - 100% of CPU I noted these messages in var/log/messages after a server reboot:
Jan 31 16:27:01 server1 clamd[5297]: Loaded 6788923 signatures.
Jan 31 16:27:03 server1 clamd[5297]: LOCAL: Could not create socket directory: /var/run/clamd.scan: Permission denied
Jan 31 16:27:03 server1 clamd: ERROR: LOCAL: Could not create socket directory: /var/run/clamd.scan: Permission denied
Jan 31 16:27:03 server1 clamd: ERROR: LOCAL: Socket file /var/run/clamd.scan/clamd.sock could not be bound: No such file or directory
Jan 31 16:27:03 server1 clamd[5297]: LOCAL: Socket file /var/run/clamd.scan/clamd.sock could not be bound: No such file or directory
Jan 31 16:27:03 server1 systemd: clamd@scan.service: control process exited, code=exited status=1
Jan 31 16:27:03 server1 systemd: Failed to start Generic clamav scanner daemon.
Jan 31 16:27:03 server1 systemd: Unit clamd@scan.service entered failed state.
Jan 31 16:27:03 server1 systemd: clamd@scan.service failed.
Jan 31 16:27:03 server1 systemd: clamd@scan.service holdoff time over, scheduling restart.
Jan 31 16:27:03 server1 systemd: Stopped Generic clamav scanner daemon.
Jan 31 16:27:03 server1 systemd: Starting Generic clamav scanner daemon…
Jan 31 16:27:03 server1 clamd[5466]: Received 0 file descriptor(s) from systemd.
Jan 31 16:27:03 server1 clamd[5466]: clamd daemon 0.101.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jan 31 16:27:03 server1 clamd[5466]: Running as user clamscan (UID 996, GID 992)
Jan 31 16:27:03 server1 clamd[5466]: Log file size limited to 1048576 bytes.
Jan 31 16:27:03 server1 clamd[5466]: Reading databases from /var/lib/clamav
Jan 31 16:27:03 server1 clamd[5466]: Not loading PUA signatures.
Jan 31 16:27:03 server1 clamd[5466]: Bytecode: Security mode set to “TrustSigned”.</.code>
I’ve seen plenty of similar chat on related topics but am no nearer to finding a solution.
In Virtualmin/email-settings/spam and virus scanning I am using
‘spamassassin (standalone program)’
‘standalone scanner’
It seems the /var/run/clamd.scan folder is missing. I wonder if reinstalling clamscan might be necessary - guidance on how to do that would be needed.
]$ rpm -qa | grep clam
clamav-filesystem-0.101.1-1.el7.noarch
clamav-update-0.101.1-1.el7.x86_64
clamd-0.101.1-1.el7.x86_64
clamav-server-systemd-0.101.1-1.el7.x86_64
clamav-0.101.1-1.el7.x86_64
clamav-lib-0.101.1-1.el7.x86_64
clamav-scanner-systemd-0.101.1-1.el7.x86_64