Results 1 to 9 of 9

Thread: KlamAV: auto-scan process died unexpectedly!

  1. #1

    Default KlamAV: auto-scan process died unexpectedly!

    Hello,

    I read already that AppAmor must be disabled.
    dazuko service is enabled.
    With root the same.
    Normal scan is working.

    Greetings

  2. #2

    Default Re: KlamAV: auto-scan process died unexpectedly!

    I don't have a true solution for your situation, but I can give you some information that might be helpful since this problem crossed my desk too.

    You didn't mention any particulars about your installed version but there have been some changes in the way opensuse has handled the dazuko module.

    In version 11.0 the kernel LSM interface was restricted to one input (hence the advice to disable Apparmor to load dazuko), the 10.3 version would accept multiple inputs and both could be loaded (surprise 10.3 upgraders!). This was filed as a bug with novell and addressed here... https://bugzilla.novell.com/show_bug.cgi?id=401920

    The patched dazuko rpm's mentioned in this bug report are still in the BuildService as I understand it.

    This patch was incorporated into 11.1 using the newer redirfs module and will allow you to load apparmor and dazuko simultaneously. I have had mixed results with this arrangement, dazuko will load but will not respond to a command to unload. Furthermore, it will hang the machine if there is too many requests (for instance if you specify scanning every file on open using Klamav). As long as your scanning is limited to a folder containing email, etc., the scanning will most likely be successful.

    My hope is that they continue to strengthen this feature, if there was a serious exploit in the wild we would be without remedy.

  3. #3

    Default Re: KlamAV: auto-scan process died unexpectedly!

    Hi,

    I have reinstalled OpenSuse 11.1 with GNOME again because I made many mistakes. I installed also all necessary packages from yast.
    I found the german installation documentation Klamav mit On-Access-Scanning (Dazuko) installieren - openSUSE
    Klamav works now, but only the first time. When I logon as another user and try to start klamav again I got the the error message "auto-scan process died unexpectedly!" This means, I can only logon with my user account and never logoff. It is enough for the moment. I have many to read concerning Linux.

  4. #4
    somebody_else NNTP User

    Default Re: KlamAV: auto-scan process died unexpectedly!

    > Hi,
    >
    > I have many to read concerning Linux.


    read up on virus/trojan and malware threats to Linux!

    are you doing all of this on a server??

    that is, if you just have a stand alone Linux machine for your own
    use, then you don't need any anti-virus software to protect your Linux
    machine..

    just forget about it..

    on the other hand if you are running a mail server for MS-Windows
    users then you have to protect them, from themselves and clean their
    mail before it lands in their fragile Outlook..

    i don't dual boot (i don't MS-Windows, at all, ever) but if you are
    going to download mail to the Linux box and THEN boot Redmond and
    access mail downloaded THEN it makes sense to clean it before you let
    it into your MS-Windows...but, if you never do that then running
    clamav is just a waste of cycles..

    OH WELL, some folks think they have a responsibility to check their
    incoming for virus/etc before they send a copy to a MS-Window using
    friend, but i do not go along with that because THEY made the decision
    to run a virus-bait machine, so they ought to BUY the software they
    need to TRY to protect it...it is NOT my job to use MY cpu cycles,
    disk space, electricity AND time to set up and maintain a system on MY
    box to protect THEM..

    ymmv

    --
    somebody_else (who has not run an anti-virus program since early 1995,
    when i LEFT Win3.1 and all that followed.)

  5. #5

    Default Re: KlamAV: auto-scan process died unexpectedly!

    Hi

    "
    that is, if you just have a stand alone Linux machine for your own
    use, then you don't need any anti-virus software to protect your Linux
    machine..

    just forget about it..
    "

    NO

    Please read only 1 of 1000000 Internet sides (you must translate):
    Zum Linux-Virus in fünf Schritten / Nachrichten / Internal / Home - LinuxCommunity

    Greetings

  6. #6
    somebody_else NNTP User

    Default Re: KlamAV: auto-scan process died unexpectedly!

    > Please read only 1 of 1000000 Internet sides (you must translate):
    > 'Zum Linux-Virus in fünf Schritten / Nachrichten / Internal / Home -
    > LinuxCommunity' (http://tinyurl.com/cshse9)


    yes, i am aware of "foobar's" and his much-ado-about nothing "virus"..

    and i can tell you that there is NO way to protect any system that is
    run by someone willing to make all of the simple security mistakes
    required to make foobar's plan work..

    on the other hand if you are not willing to be responsible for your
    own actions (YOU have to LAUNCH foobar's plan on your machine) then
    you need to run clamAV..

    good luck--you will need it if you think any program can save your
    machine from user inattention..

    foobar spreads one thing FUD, which is Fear, Uncertainity and
    Doubt...a FAVORITE tactic of MS in their attempt to get folks to not
    use open source software..

    see: http://en.wikipedia.org/wiki/Fear,_u...inty_and_doubt

    i have not run any anti-virus program since 1995, and i do not intend
    to begin...if you want to waste your cycles, go ahead..

    --
    decorated_warrior

  7. #7

    Default Re: KlamAV: auto-scan process died unexpectedly!

    Quote Originally Posted by byvis View Post
    Hi,

    I have reinstalled OpenSuse 11.1 with GNOME again because I made many mistakes. I installed also all necessary packages from yast.
    I found the german installation documentation Klamav mit On-Access-Scanning (Dazuko) installieren - openSUSE
    Klamav works now, but only the first time. When I logon as another user and try to start klamav again I got the the error message "auto-scan process died unexpectedly!" This means, I can only logon with my user account and never logoff. It is enough for the moment. I have many to read concerning Linux.
    aside of dispute to have or not to have an antivirus software on linux box, if you need one give a try to Avira.
    i've tried Clamav/Klamav but the performance was terrible

    furthermore, dazuko kernel module is obsoleted now and the future is DazukoFS - hopefully soon will be part of vanila kernel - Dazuko

    clamav doesn't support it yet but the latest Avira does and despite there are some problems generally it runs properly.

    good luck

  8. #8

    Default Re: KlamAV: auto-scan process died unexpectedly!

    It would be nice if Linux is not vulnerable to pests. I can not be careful what scripts are running when I'm using FF or mail on my private Linux. I just want to have a warning from my avtivirus.

    At the moment I want to install DazukoFS. Unfortunately for open suse 11.1 64bit and Ubuntu 9.04 I have no solution/good instruction found.

    I do not like Avira, not on Windows and not on Linux. I prefere Kaspersky or AVG.

    Please remember: clamav and Klamav are working now on openSUSE (only with first logon) and with evolution (I made a filter). Now I'm trying to install dazukoFS open suse 11.1 64bit and Ubuntu 9.04 .

    ERROR openSUSE (the patch that is included does also not work):
    linux-qtcm:/home/byvis/Programme/dazukofs-3.0.0 # make
    make -C /lib/modules/"`uname -r`"/build SUBDIRS="`pwd`" modules
    make[1]: Entering directory `/usr/src/linux-2.6.27.21-0.1-obj/x86_64/default'
    make[1]: *** Keine Regel, um modules zu erstellen. Schluss.
    make[1]: Leaving directory `/usr/src/linux-2.6.27.21-0.1-obj/x86_64/default'
    make: *** [dazukofs_modules] Fehler 2
    linux-qtcm:/home/byvis/Programme/dazukofs-3.0.0 #

    Regards

  9. #9

    Default Re: KlamAV: auto-scan process died unexpectedly!

    the patch for opensuse 11.0/11.1 is definitely working - running 64 bit system too
    have you kernel source installed?
    how did you apply the patch?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •