/tmp/McAfeeBusy.lock

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----


On 23 Jan 2006, at 14:54, Denis Beauchemin wrote:

> Julian Field wrote:
>
>> Julian Field wrote:
>>
>>> andrew at pirates.armstrong.edu wrote:
>>>
>>>> I somehow got a lockfile owned by root left around on my system,
>>>> /tmp/McAfeeBusy.lock.  This caused mailscanner to skip the virus  
>>>> checking
>>>> and deliver infected email.  Would it be possible just to stop  
>>>> delivery
>>>> under these circumstances?
>>>>
>>>
>>> That certainly shouldn't happen! Please can you double-check your  
>>> results.
>>> It should just cause the virus scanner to wait until the file was  
>>> lockable.
>>> Please try it with the EICAR virus pattern (from www.eicar.org)  
>>> which is a harmless test file, and let me know the result.
>>>
>> I have just tested this and it worked just fine.
>> Not sure what you did, but I would request that you re-do your  
>> tests. I cannot reproduce the behaviour that you found.
>>
> Julian,
>
> I also have this file on my systems, but it seems to get updated  
> quite often:
> [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> Virus checker locked for scanning by mcafee 3546
> [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> Virus checker locked for scanning by mcafee 2284
> [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> Virus checker locked for scanning by mcafee 2284
> [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> Virus checker locked for scanning by mcafee 3794
>
> My McAfee does detect viruses!  I'm using mailscanner-4.50.10-1  
> under RHEL 4.

It is there so that MailScanner and the mcafee-autoupdate processes  
lock out each other. If you were in the middle of a mcafee-autoupdate  
when you tried to scan a message, it is possible (but very unlikely)  
that the virus definitions would be partially complete, so you may  
miss a virus.

So they lock out each other so that the two processes cannot happen  
at the same time.

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.4 (Build 4042)

iQEVAwUBQ9TyUfw32o+k+q+hAQGbVggAtqDdqw6JR3itTvG/Y/fwWtFe920JEQ+8
3iOAkevnEJjALEctOaREJ0UQ20x5tZhDhIrUlMZ4JxM03u/6magN+vjnlvD1/LVP
tUWvscArSFwN0/4GXHoXgFXJIcrm7rIbCHQucAvdvOtAksmaIDfxdoC9U3h5VKV7
ReGApexIq7CQUjhu48iJDwzQ6PULFjJRFNftahDHJeu0Iekzg0r7iOSjxdoo1YnP
a5mDh91ybfpSuVxsYZ5bJEkznP6M8mEIhD1AeaLW6Q6stSU+9kOvbOmOoEKC22hO
YIJ6FN4jiiq7osOk4PqhKJjw4swE6VCXBtnWs6dOG8QAASkcpkjkjQ==
=iHOK
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.