ClamAV Unofficial Signatures

[dik23]

On our test environment I follow the directions given here using the latest 5.6.2:

https://wiki.zimbra.com/wiki/Clamav_unofficial_sigs

Then as zimbra I do:

Code: Select all

~$ /bin/bash /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh -c /opt/zimbra/conf/clamav-unofficial-sigs
################################################################################
 eXtremeSHOK.com ClamAV Unofficial Signature Updater
 Version: v5.6.2 (2017-03-19)
 Required Configuration Version: v72
 Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com
################################################################################
=============================================
ERROR: Config file/s could NOT be read/loaded
=============================================
Note: Possible fix would be to checkl the config dir /etc/clamav-unofficial-sigs exists and contains config files

What Have I missed? I'm sure it's something simple but I'm not getting anywhere.

[phoenix]

I'm afraid my question is pretty obvious, do the config files actually exist and do they have the correct permissions?

[dik23]

I think this is correct:

Code: Select all

~# ls -lah /opt/zimbra/conf/clamav-unofficial-sigs
total 59K
drwxr-x---  2 zimbra zimbra    5 Nov 27 14:43 .
drwxr-xr-x 16 zimbra zimbra  137 Nov 27 14:42 ..
-rw-r-----  1 zimbra zimbra  26K Nov 27 17:08 master.conf
-rw-r-----  1 zimbra zimbra  382 Nov 27 17:12 os.conf
-rw-r-----  1 zimbra zimbra 2.0K Nov 27 17:08 user.conf

[phoenix]

The first thing to point out is that the wiki article is not correct for recent versions of ZCS, the locations given for clamscan & clamdscan have changed to :

Code: Select all

/opt/zimbra/common/bin/

Once that change was made it then throws the following error:

Code: Select all

Note: Possible fix would be to checkl the config dir /etc/clamav-unofficial-sigs exists and contains config files

It seems to think the default directory is elsewhere other than the modified location. That was my brief findings and I'm afraid I''ll have to leave it there. I did run these add-on signatures in the past but never found them of any use although YMMV. I'm also not keen on installing this sort of software on ZCS when it appears to be poorly maintained but that's only my view. I'm afraid I don't really have the time to investigate much further.

[jorgedlcruz]

Hello,
I've tried right now, it seems a bug on the clamav release, opening a issue now on github, meanwhile, edit the file /opt/zimbra/clamav-unofficial-sigs/clamav-unofficial-sigs.sh and search for this

Code: Select all

# Default config files
config_dir="/etc/clamav-unofficial-sigs"

And change it to:

Code: Select all

# Default config files
config_dir="/opt/zimbra/conf/clamav-unofficial-sigs"

This is not recommended by them, but it will work meanwhile the fix the issue