ClamAV Resetting socket configs on server reboot

Question

1. After installing ClamAV on Amazon Linux 2, I setup the socket with the proper permissions for Apache to access the clamd socket, but on server reboot, all of these configs are reset. Huh?!? Can anyone tell me what is happening? Is this some Amazon config or a weird security "feature" of the latest ClamAV? The version i've install from YUM is ClamAV 0.102.3. SELinux has been disabled.  
  
2. Also, I cannot seem to get ClamAV to access to the /var/log for logging. This was never a problem in previous versions.  
  
Edited by: newlist on Jun 19, 2020 6:09 AM

Answer

When installing ClamAV on Linux2, do NOT use the /var/run ... dir which the default ClamAV install sets. Instead, move this to /var/www/clamd/ or some other dir that has apache permissions if you need the socket connection for a web app. Amazon Linux2 overwrites the /var/run on reboot so any configs you need to have set there vanish on reboot.

ClamAV Resetting socket configs on server reboot

Relevanter Inhalt