"Possible" ClamAV issue?

grimdari

New Member
Jun 3, 2021
4
0
1
53
I watch my log files like a hawk and saw this appear. Is this something to worry about? It has been happening daily for a few days now.

Code:
ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!
TASK ERROR: command '/usr/bin/freshclam --stdout' failed: exit code 2

Code:
proxmox-mailgateway: 7.1-1 (API: 7.1-1/7d5cde4b, running kernel: 5.13.19-3-pve)
pmg-api: 7.1-1
pmg-gui: 3.1-1
pve-kernel-helper: 7.1-8
pve-kernel-5.13: 7.1-6
pve-kernel-5.4: 6.4-10
pve-kernel-5.13.19-3-pve: 5.13.19-7
pve-kernel-5.13.19-2-pve: 5.13.19-4
pve-kernel-5.4.151-1-pve: 5.4.151-1
pve-kernel-5.4.124-1-pve: 5.4.124-2
pve-kernel-5.4.106-1-pve: 5.4.106-1
clamav-daemon: 0.103.5+dfsg-0+deb11u1
ifupdown: 0.8.36
libarchive-perl: 3.4.0-1
libjs-extjs: 7.0.0-1
libjs-framework7: 4.4.7-1
libproxmox-acme-perl: 1.4.1
libproxmox-acme-plugins: 1.4.1
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.1-2
libpve-http-server-perl: 4.1-1
libxdgmime-perl: 1.0-1
lvm2: 2.03.11-2.1
pmg-docs: 7.1-1
pmg-i18n: 2.6-2
pmg-log-tracker: 2.3.1-1
postgresql-13: 13.5-0+deb11u1
proxmox-mini-journalreader: 1.3-1
proxmox-spamassassin: 3.4.6-4
proxmox-widget-toolkit: 3.4-5
pve-firmware: 3.3-4
pve-xtermjs: 4.12.0-1
zfsutils-linux: 2.1.2-pve1
root@pmg:~# freshclam --version
ClamAV 0.103.5/26448/Wed Feb  9 03:31:19 2022
root@pmg:~# which freshclam
/usr/bin/freshclam

pmg.png
 
I watch my log files like a hawk and saw this appear. Is this something to worry about? It has been happening daily for a few days now.
how many freshclam processes are running on your machine?
when does the error-message occur?
anything written in the journal around the time you get the error?
anything written in the freshclam.log around the time you get the error?
are you actively updating the virus-databases?
 
how many freshclam processes are running on your machine?
when does the error-message occur?
anything written in the journal around the time you get the error?
anything written in the freshclam.log around the time you get the error?
are you actively updating the virus-databases?
Number of freshclam processes:
Code:
root@pmg:~# ps aux | grep fresh | wc -l
1

When does the error occur:
Every time ClamAV Update runs. See below for times.

Journal around the time:
Only the original ERROR appears in the journal. The one I pasted in my first post.

Freshcam.log:
Nothing that I can see that says; error, warning, etc.

Actively updating:
The ClamAV database, according to the Tasks tab in the web UI, gets automatically updated every day. The update doesn't run at the same time every day. For example, it ran at 10:59 AM yesterday, 10:22 AM the previous day, 3:00 PM the day before.

One thing more to note, the error occurs twice in a row roughly 10 to 12 seconds apart, I assume because ClamAV Update is trying to run again.

Again, this may be nothing and I am chasing a red herring, I just want to make sure. :D
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!