Re: [Dazuko-help] dazuko 2.3.3 + clamav 0.93 + kernel 2.6.18 : system crash

[John Ogness]

On 2008-06-02, Mishustin Alexey <address@hidden> wrote:
> I have a big problem using Clamuko+Dazuko. After trying to open a
> folder with eicar.com.txt and eicar_com.zip in nautilus or after
> making "$ cat eicar.com.txt" in GNOME-terminal I get a system
> hang-up and crash. Even Ctrl+Alt+F1 or Ctrl+Alt+BackSpace doesn't
> help, only Reset.
>
> On-demand scanner and clamd (with Evolution) both are working well.
>
> Clamav: 0.93, compiled with default settings from sources from
> www.clamav.net
> Dazuko: 2.3.3 from www.dazuko.org, with recommended "./configure
> --disable-local-dpath"
> Kernel: 2.6.18, SMP, recompiled with capabilities as module, patched with
> dazuko's patch_dpath.diff, so - now exporting __d_path()
> Distro: Debian 4 Etch
>
> Excerpt from clamav.log:
> Sun Jun 1 16:31:31 2008 -> Clamuko: Correctly registered with Dazuko.
> Sun Jun 1 16:31:31 2008 -> Clamuko: Scan-on-open mode activated.
> Sun Jun 1 16:31:31 2008 -> Clamuko: Scan-on-close mode activated.
> Sun Jun 1 16:31:31 2008 -> Clamuko: Scan-on-exec mode activated.
> Sun Jun 1 16:31:31 2008 -> Clamuko: Included path /
> Sun Jun 1 16:31:31 2008 -> Clamuko: Excluded path /proc
> Sun Jun 1 16:31:31 2008 -> Clamuko: Excluded path <...>
> Sun Jun 1 16:31:31 2008 -> Clamuko: Max file size limited to 52428800
> bytes.

Have you tested Dazuko using the "example" program included in the
Dazuko package? (In the "example_c" subdirectory.)

You may also want to try just including a single path for testing
(rather than "/"). If that works, then there is probably some
directory that is causing problems when included by Clamav.

John Ogness

-- 
Dazuko Maintainer