Your cPanel server has issues - /var/lib/clamav

[yaroo]

Ever since the recent EasyApache update, I’ve had some odd issues with ClamAV. The packages appeared to have been replaced by Imunify ClamAV packages.

I wasn’t able to easily upgrade, via automated overnight update. I noticed that the ClamAV packages seemed to have been preventing the update, when manually running /scripts/upcp --force.

I tried updating ClamAV, but the new packages weren’t showing.

I then uninstalled the ClamAV plugin, via cPanel WHM interface, then ran the update. It made it through the update and also installed the latest cPanel ClamAV packages.

Everything appeared fine at that point, but now I’m receiving the “your server had issues” email with the following as being the problem.

Check cagefs mount points exists:

FAILED: There are missing mount points: [/var/lib/clamav]

Has the latest version of ClamAV been relocated? If so, is there something that I should have done within Imunify and/or CloudLinux?

[kobiidykhata]

Hello Shannon,
we do not use ClamAV in our products. Please open a support ticket here https://cloudlinux.zendesk.com/hc/en-us/requests/new so our specialist can help you asap.

Thanks in advance!

[kobiidykhata]

Could cloudlinux explain what the error means in the first place? I dont know who to escalate the issue with: Cloudlinux, cPanel or ClamAV?

[kobiidykhata]

Hi, Same issue. Interested in the answer!

[skhristich]

> Could cloudlinux explain what the error means in the first place? I dont know who to escalate the issue with: Cloudlinux, cPanel or ClamAV?

Hello Juan,
Thank you for reaching out! In this case, you can comment or remove /var/lib/clamav in the file /etc/cagefs/cagefs.mp
After that, update the cell using:

cagefsctl --force-update

cagefsctl -M

Let me know if you have any questions. Hope to hear from you soon.

[skhristich]

> Hello Juan,
> Thank you for reaching out! In this case, you can comment or remove /var/lib/clamav in the file /etc/cagefs/cagefs.mp
> After that, update the cell using:
>
>

>
> cagefsctl --force-update
>
> cagefsctl -M
>
>

>
> Let me know if you have any questions. Hope to hear from you soon.

Thanks Sergey,

Found !/var/lib/clamav around line 50 and removed it. As a sidenote there was a lot of the following lines in that file which makes me think its something to do with imunify360 + cloudlinux environments:

# next line is added by imunify360

# next line is added by imunify360

# next line is added by imunify360

For other people troubleshooting, my kernel is 3.10.0-714.10.2.lve1.4.74.el7.x86_64

I then ran the following to re-run the report:

cldiag --cron-check

My WHM server is configured to only email when theres an error and nothing came through this time so Im assuming its finally fixed!

[skhristich]

Hello Cameron,
Thanks for following up! This has been fixed since version 4.8.4 https://blog.imunify360.com/imunify3...-4.8.4-updated.
Thanks for the feedback.