/tmp/McAfeeBusy.lock

[andrew at pirates.armstrong.edu]

I can't replicate this today.  The same virus file that I was having trouble
with on friday catches the virus, even with that lock file in place.
On friday, I could scan mydoom.o on the command line, but when 
I sent it  through the scanner, it wasn't detected.  Today the file
works either way.

Thank you for looking at this.  I was so sure that removing this file
got the scanner working that I didn't think to try adding it back.
Now I know that I may not have fixed the problem completely.  My apologies
for the bad bug report. 



On Mon, Jan 23, 2006 at 03:12:15PM +0000, Julian Field wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> 
> On 23 Jan 2006, at 14:54, Denis Beauchemin wrote:
> 
> > Julian Field wrote:
> >
> >> Julian Field wrote:
> >>
> >>> andrew at pirates.armstrong.edu wrote:
> >>>
> >>>> I somehow got a lockfile owned by root left around on my system,
> >>>> /tmp/McAfeeBusy.lock.  This caused mailscanner to skip the virus  
> >>>> checking
> >>>> and deliver infected email.  Would it be possible just to stop  
> >>>> delivery
> >>>> under these circumstances?
> >>>>
> >>>
> >>> That certainly shouldn't happen! Please can you double-check your  
> >>> results.
> >>> It should just cause the virus scanner to wait until the file was  
> >>> lockable.
> >>> Please try it with the EICAR virus pattern (from www.eicar.org)  
> >>> which is a harmless test file, and let me know the result.
> >>>
> >> I have just tested this and it worked just fine.
> >> Not sure what you did, but I would request that you re-do your  
> >> tests. I cannot reproduce the behaviour that you found.
> >>
> > Julian,
> >
> > I also have this file on my systems, but it seems to get updated  
> > quite often:
> > [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> > Virus checker locked for scanning by mcafee 3546
> > [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> > Virus checker locked for scanning by mcafee 2284
> > [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> > Virus checker locked for scanning by mcafee 2284
> > [root at smtpe1 ~]# cat /tmp/McAfeeBusy.lock
> > Virus checker locked for scanning by mcafee 3794
> >
> > My McAfee does detect viruses!  I'm using mailscanner-4.50.10-1  
> > under RHEL 4.
> 
> It is there so that MailScanner and the mcafee-autoupdate processes  
> lock out each other. If you were in the middle of a mcafee-autoupdate  
> when you tried to scan a message, it is possible (but very unlikely)  
> that the virus definitions would be partially complete, so you may  
> miss a virus.
> 
> So they lock out each other so that the two processes cannot happen  
> at the same time.
> 
> - -- 
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.4 (Build 4042)
> 
> iQEVAwUBQ9TyUfw32o+k+q+hAQGbVggAtqDdqw6JR3itTvG/Y/fwWtFe920JEQ+8
> 3iOAkevnEJjALEctOaREJ0UQ20x5tZhDhIrUlMZ4JxM03u/6magN+vjnlvD1/LVP
> tUWvscArSFwN0/4GXHoXgFXJIcrm7rIbCHQucAvdvOtAksmaIDfxdoC9U3h5VKV7
> ReGApexIq7CQUjhu48iJDwzQ6PULFjJRFNftahDHJeu0Iekzg0r7iOSjxdoo1YnP
> a5mDh91ybfpSuVxsYZ5bJEkznP6M8mEIhD1AeaLW6Q6stSU+9kOvbOmOoEKC22hO
> YIJ6FN4jiiq7osOk4PqhKJjw4swE6VCXBtnWs6dOG8QAASkcpkjkjQ==
> =iHOK
> -----END PGP SIGNATURE-----
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> -- 
> MailScanner mailing list
> MailScanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 

-- 
Andrew Eason	System Administrator	andrew at armstrong.edu