Bugzilla – Bug 1232242
clamd with clamondacc generates enormous amounts of "File path check failure"
Last modified: 2025-07-03 14:44:52 UTC
clamd is starting but "details" in yast shows: ● clamd.service - Clam AntiVirus userspace daemon Loaded: loaded (/usr/lib/systemd/system/clamd.service; enabled; preset: disabled) Active: active (running) since Thu 2024-10-24 10:23:10 CEST; 39min ago Invocation: d6f2845fb50e400382658580b7b6b3c3 Docs: man:clamd(8) man:clamd.conf(5) https://www.clamav.net/documents/ Process: 92184 ExecStart=/usr/sbin/clamd (code=exited, status=0/SUCCESS) Main PID: 92185 (clamd) Tasks: 5 (limit: 76213) CPU: 19.334s CGroup: /system.slice/clamd.service └─92185 /usr/sbin/clamd Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure for: /home/mercurio/.config/kdedefaults/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure on: /home/mercurio/.config/kdedefaults/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure for: /home/mercurio/.config/kdedefaults/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure on: /home/mercurio/.config/kdedefaults/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure for: /home/mercurio/.config/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure on: /home/mercurio/.config/kcminputrc Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure for: /home/mercurio/.config/fcitx/dbus/908e705ff27249168c600ebe0e506888-0 Oct 24 11:02:17 silversurfer clamd[92185]: File path check failure on: /home/mercurio/.config/fcitx/dbus/908e705ff27249168c600ebe0e506888-0 Oct 24 11:02:27 silversurfer clamd[92185]: File path check failure for: /home/mercurio/.java/.userPrefs/.user.lock.mercurio Oct 24 11:02:27 silversurfer clamd[92185]: File path check failure on: /home/mercurio/.java/.userPrefs/.user.lock.mercurio In the journal there are loads of these "file path check" errors. Clamonacc starts just fine ● clamonacc.service - ClamAV On-Access Scanner Loaded: loaded (/usr/lib/systemd/system/clamonacc.service; enabled; preset: disabled) Active: active (running) since Thu 2024-10-24 10:23:10 CEST; 40min ago Invocation: d509d656a1a9483c9e867f9fb84d1675 Docs: man:clamonacc(8) man:clamd.conf(5) https://docs.clamav.net/ Process: 92199 ExecStart=/usr/sbin/clamonacc --ping 30:10 --wait (code=exited, status=0/SUCCESS) Main PID: 92200 (clamonacc) Tasks: 8 (limit: 76213) CPU: 25.539s CGroup: /system.slice/clamonacc.service └─92200 /usr/sbin/clamonacc --ping 30:10 --wait Oct 24 10:23:10 silversurfer systemd[1]: Starting ClamAV On-Access Scanner... Oct 24 10:23:10 silversurfer systemd[1]: Started ClamAV On-Access Scanner. No messages in journal. Excerpt of typical errors form clamd in the journal: ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/fcitx/dbus/908e705ff27249168c600ebe0e506888-0 ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/fcitx/dbus/908e705ff27249168c600ebe0e506888-0 ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/fcitx/dbus/908e705ff27249168c600ebe0e506888-0 ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kdedefaults/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kdedefaults/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kdedefaults/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kdedefaults/kcminputrc ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/mime/types ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/mime/types ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/mime/types ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/mime/types ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/mime/mime.cache ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/mime/mime.cache ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kdeglobals ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kdeglobals ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.config/kdedefaults/kdeglobals ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.config/kdedefaults/kdeglobals ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/02/145002_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/01/145001_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/00/145000_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/99/144999_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/98/144998_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/97/144997_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer clamd[2483]: File path check failure for: /home/mercurio/.local/share/baloo/emailContacts/postlist.glass ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: org.kde.pim.akonadicore: Failed to open external payload: "/home/mercurio/.local/share/akonadi/file_db_data/96/144996_r0" "File o cartella non trovati" ott 24 09:55:47 silversurfer akonadi_indexing_agent[7320]: QProcess: Destroyed while process ("akonadi_html_to_text") is still running. ott 24 09:55:47 silversurfer clamd[2483]: File path check failure on: /home/entropy/.config/gajim/settings.sqlite Now the internet proposes this link (pertienent to RHEL and SElinux) but I do not use either: https://github.com/Cisco-Talos/clamav/issues/441 A very irritated user reproposed it claiming "that google is apparently taboo for me" and that the "there is what has to be done". Sorry I went through it but did not see any indication of solution. So I am actually not sure that this could be an issue of configuration, but if it is, I did not see it. Could appamor be involved? Hence reporting it as a bug (which I think it is).
% osc maintainer -e clamav Defined in package: security/clamav bugowner of clamav : max@suse.com maintainer of clamav : max@suse.com, toganm@dinamizm.com
(In reply to Stakanov Schufter from comment #0) > Could appamor be involved? Please disable apparmor temporarily and see if that silences the errors.
(In reply to Reinhard Max from comment #2) > (In reply to Stakanov Schufter from comment #0) > > > Could appamor be involved? > > Please disable apparmor temporarily and see if that silences the errors. Given that I did not find a valuable command to do this on the command line, I deactivated in services and set start to manual. I rebooted then. Journalctl full of these messages. mercurio@silversurfer:~> sudo aa-status apparmor module is loaded. Failed to get profiles: 2.... Not sure that aa is really deactivated. I thinks so since there are profiles and if they are not loaded....
example of what I means with "these messages" ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.cache/plasmashell/qmlcache/9f96edc487d34971902c162a51c756f4b6fd1bc4.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.cache/plasmashell/qmlcache/9f96edc487d34971902c162a51c756f4b6fd1bc4.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.cache/plasmashell/qmlcache/9f96edc487d34971902c162a51c756f4b6fd1bc4.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.cache/plasmashell/qmlcache/9f96edc487d34971902c162a51c756f4b6fd1bc4.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.cache/plasmashell/qmlcache/d577de01679275428b3d5e1b8cacf28f69d96f91.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.cache/plasmashell/qmlcache/d577de01679275428b3d5e1b8cacf28f69d96f91.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.cache/plasmashell/qmlcache/d577de01679275428b3d5e1b8cacf28f69d96f91.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.cache/plasmashell/qmlcache/d577de01679275428b3d5e1b8cacf28f69d96f91.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.cache/plasmashell/qmlcache/1a600d3b72540bddced2aba9d7a43c8015727ae6.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.cache/plasmashell/qmlcache/1a600d3b72540bddced2aba9d7a43c8015727ae6.qmlc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure on: /home/mercurio/.config/kalendaracrc ott 26 14:26:34 silversurfer clamd[1904]: File path check failure for: /home/mercurio/.config/kalendaracrc
I was now (with the help of a user on users(at)list.opensuse.org) able to setup the software so that the problem does not arise. "Please edit /usr/lib/systemd/system/clamonacc.service just like this; [Service] Type=forking User=root ExecStart=/usr/sbin/clamonacc --ping 30:10 --wait --fdpass" the rational given was: "If you're running clamonacc with clamd, it may be that clamd is running as the "clamav" user and does not have permission to open these files in your home directory. "clamonacc --fdpass" fix your issue. That is, the --fdpass option give the file handle from clamonacc to clamd so that clamd does not need permission to open the file, where --fdpass is an extra commandline option when you start the clamonacc service." I hence edited and now the flooding of the journal stopped. Now I claim this is a bug, because when you setup the software it is nearly unavoidable that, as a "normal PEBKAC user" you run into it, and the information where to edit and what to edit is not evident. Although I wonder if there is a rational not to pass that parameter by default in the first place. If there is, a commented note with the parameter (commented out) in /usr/lib/systemd/system/clamonacc.service could be a good idea and/or a commented explanation what to when you encounter this problem in /etc/clamd.conf (were the main part of the user is going to hit, as the error is given by clamd and not by clammonacc in the log) would be a good idea. If you tell there, what to do, in a comment in clamd.conf, that would then do the trick of helping the user to debug. Credits go to Mr. Masaru Nomiya <nomiya(at)lake.dti.ne.jp> of users(at)list.opensuse.org Thank you for considering this proposal.
SUSE-SU-2025:0328-1: An update that solves six vulnerabilities, contains one feature and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250328-1 Category: security (important) Bug References: 1102840, 1103032, 1180296, 1202986, 1211594, 1214342, 1232242, 1236307 CVE References: CVE-2018-14679, CVE-2023-20197, CVE-2024-20380, CVE-2024-20505, CVE-2024-20506, CVE-2025-20128 Jira References: PED-4596 Maintenance Incident: [SUSE:Maintenance:37248](https://smelt.suse.de/incident/37248/) Sources used: SUSE Linux Enterprise Server 12 SP5 LTSS (src): clamav-1.4.2-3.36.1 SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src): clamav-1.4.2-3.36.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2025:0327-1: An update that solves six vulnerabilities, contains one feature and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250327-1 Category: security (important) Bug References: 1102840, 1103032, 1180296, 1202986, 1211594, 1214342, 1232242, 1236307 CVE References: CVE-2018-14679, CVE-2023-20197, CVE-2024-20380, CVE-2024-20505, CVE-2024-20506, CVE-2025-20128 Jira References: PED-4596 Maintenance Incident: [SUSE:Maintenance:37246](https://smelt.suse.de/incident/37246/) Sources used: openSUSE Leap 15.6 (src): clamav-1.4.2-150600.18.6.1 Basesystem Module 15-SP6 (src): clamav-1.4.2-150600.18.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2025:0325-1: An update that solves six vulnerabilities, contains three features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250325-1 Category: security (important) Bug References: 1102840, 1103032, 1180296, 1202986, 1211594, 1214342, 1232242, 1236307 CVE References: CVE-2018-14679, CVE-2023-20197, CVE-2024-20380, CVE-2024-20505, CVE-2024-20506, CVE-2025-20128 Jira References: PED-4596, SMO-494, SMO-495 Maintenance Incident: [SUSE:Maintenance:37244](https://smelt.suse.de/incident/37244/) Sources used: SUSE Linux Enterprise Micro 5.5 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server 15 SP3 LTSS (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server 15 SP4 LTSS (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server 15 SP5 LTSS (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src): clamav-1.4.2-150200.8.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src): clamav-1.4.2-150200.8.3.1 SUSE Manager Proxy 4.3 (src): clamav-1.4.2-150200.8.3.1 SUSE Manager Retail Branch Server 4.3 (src): clamav-1.4.2-150200.8.3.1 SUSE Manager Server 4.3 (src): clamav-1.4.2-150200.8.3.1 SUSE Enterprise Storage 7.1 (src): clamav-1.4.2-150200.8.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Done.