Package: clamav-freshclam Version: 0.100.1+dfsg-1 Severity: wishlist Dear Maintainer, my production servers with ClamAV sent me messages from logcheck after latest Debian 9.5 point release upgrade. A newer freshclam probably has implemented setting LogTime from /etc/clamav/freshclam.conf. Logcheck rules don't assume the extra time information in log messages. I tried to install clamav-freshclam into my Sid laptop and LogTime is set to true and really:
bobek:~# systemctl status clamav-freshclam.service ● clamav-freshclam.service - ClamAV virus database updater Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; enabled; vendor preset: enabled) Active: active (running) since Wed 2018-07-18 10:35:02 CEST; 11min ago Docs: man:freshclam(1) man:freshclam.conf(5) https://www.clamav.net/documents Main PID: 23166 (freshclam) Tasks: 1 (limit: 4915) Memory: 162.0M CGroup: /system.slice/clamav-freshclam.service └─23166 /usr/bin/freshclam -d --foreground=true Jul 18 10:35:02 bobek systemd[1]: Started ClamAV virus database updater. Jul 18 10:35:02 bobek freshclam[23166]: Wed Jul 18 10:35:02 2018 -> ClamAV update process started at Wed Jul 18 10:35:02 2018 Jul 18 10:35:47 bobek freshclam[23166]: Wed Jul 18 10:35:47 2018 -> Downloading main.cvd [100%] Jul 18 10:35:55 bobek freshclam[23166]: Wed Jul 18 10:35:55 2018 -> main.cvd updated (version: 58, sigs: 4566249, f-level: 60, build Jul 18 10:36:13 bobek freshclam[23166]: Wed Jul 18 10:36:13 2018 -> Downloading daily.cvd [100%] Jul 18 10:36:19 bobek freshclam[23166]: Wed Jul 18 10:36:19 2018 -> daily.cvd updated (version: 24760, sigs: 2015700, f-level: 63, b Jul 18 10:36:19 bobek freshclam[23166]: Wed Jul 18 10:36:19 2018 -> Downloading bytecode.cvd [100%] Jul 18 10:36:19 bobek freshclam[23166]: Wed Jul 18 10:36:19 2018 -> bytecode.cvd updated (version: 324, sigs: 89, f-level: 63, build Jul 18 10:36:24 bobek freshclam[23166]: Wed Jul 18 10:36:24 2018 -> Database updated (6582038 signatures) from db.local.clamav.net ( Jul 18 10:36:24 bobek freshclam[23166]: Wed Jul 18 10:36:24 2018 -> !NotifyClamd: Can't find or parse configuration file /etc/clamav There is extra Wed Jul 18 10:36:24 2018 -> superfluous time information. LogTime false is probably better default setting. Best Regards Thanks for your work -- Zito -- Package-specific info: --- configuration --- # Automatically created by the clamav-freshclam postinst # Comments will get lost when you reconfigure the clamav-freshclam package DatabaseOwner clamav UpdateLogFile /var/log/clamav/freshclam.log LogVerbose false LogSyslog false LogFacility LOG_LOCAL6 LogFileMaxSize 0 LogRotate true LogTime true Foreground false Debug false MaxAttempts 5 DatabaseDirectory /var/lib/clamav DNSDatabaseInfo current.cvd.clamav.net ConnectTimeout 30 ReceiveTimeout 30 TestDatabases yes ScriptedUpdates yes CompressLocalDatabase no SafeBrowsing false Bytecode true NotifyClamd /etc/clamav/clamd.conf # Check for new database 24 times a day Checks 24 DatabaseMirror db.local.clamav.net DatabaseMirror database.clamav.net --- data dir --- total 162736 -rw-r--r-- 1 clamav clamav 185246 Jul 18 10:36 bytecode.cvd -rw-r--r-- 1 clamav clamav 48545458 Jul 18 10:36 daily.cvd -rw-r--r-- 1 clamav clamav 117892267 Jul 18 10:35 main.cvd -rw------- 1 clamav clamav 52 Jul 18 10:36 mirrors.dat -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.17.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages clamav-freshclam depends on: ii clamav-base 0.100.1+dfsg-1 ii debconf [debconf-2.0] 1.5.67 ii dpkg 1.19.0.5+b1 ii libc6 2.27-5 ii libclamav7 0.100.1+dfsg-1 ii libssl1.1 1.1.0h-4 ii logrotate 3.11.0-0.1 ii lsb-base 9.20170808 ii procps 2:3.3.15-2 ii ucf 3.0038 ii zlib1g 1:1.2.11.dfsg-1 clamav-freshclam recommends no packages. Versions of packages clamav-freshclam suggests: ii apparmor 2.12-5 pn clamav-docs <none> -- Configuration Files: /etc/logcheck/ignore.d.server/clamav-freshclam [Errno 13] Permission denied: '/etc/logcheck/ignore.d.server/clamav-freshclam' -- debconf information excluded