killdash9 / MacClam

The Non-Graphical ClamAV Antivirus Solution for Mac OS X
MIT License
48 stars 15 forks source link

2 issues: cannot dlopen libclamunrar_iface; awk choking #7

Open steb5067 opened 3 years ago

steb5067 commented 3 years ago

Hi

just installed macclam on a new machine (intel not M1) running big sur and have run into the following two erros


Checking for ClamAV Signature Updates

LibClamAV Warning: Cannot dlopen libclamunrar_iface: dlopen(libclamunrar_iface.a, 2): no suitable image found. Did find: file system relative paths not allowed in hardened programs - unrar support unavailable ClamAV update process started at Thu Aug 5 09:39:02 2021 daily.cld database is up-to-date (version: 26253, sigs: 1966181, f-level: 90, builder: raynman) main.cvd database is up-to-date (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr) bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)


Ensure Services are Running

Is clamd runnning?...Yes Is it the current version?...Yes Is fswatch running?...Yes Is it running the latest version and configuration?...Yes

Monitoring /Users/steb /Applications


Current Activity

You can press Control-C to stop viewing activity. Scanning services will continue running.

==> /Users/steb/MacClam/log/clamd.log <== awk: illegal statement input record number 2, file source line number 42

The first may be a big sur issue as it doesnt appear on my high sierra mac, the latter appears on both machines.

harens commented 3 years ago

Hi there @steb5067 👋

After having a look at https://github.com/killdash9/MacClam/issues/8, does reverting https://github.com/killdash9/MacClam/commit/5f565a4b8ebc92d7d6cf70ca6b3b80be57533b52 help for the awk issue? (i.e. reverting flush to fflush)

watersb commented 2 years ago

M1 MacBook Air 2020, Mojave, Xcode and Xcode CLI Tools, but no other system tweaks yet such as HomeBrew or MacPorts:

Same dylib loader errors.

I tried to explicitly set the dylib loader path to the MacClam installation, but this does not fix the issue.

export DYLD_FALLBACK_LIBRARY_PATH="${CLAMAV_INS}/lib

I suspect that some security feature of macOS SIP may be preventing these libs from loading but I have no idea; the ${CLAMAV_INS}/logs just report that the virus defs cannot be loaded.

% otool -L MacClam/clamav-installation-0.103.5/bin/freshclam  
MacClam/clamav-installation-0.103.5/bin/freshclam:
    /Users/my_user_name/Downloads/Tools/MacClam/clamav-installation-0.103.5/lib/libclamav.9.dylib (compatibility version 10.0.0, current version 10.5.0)
    /Users/my_user_name/Downloads/Tools/MacClam/clamav-installation-0.103.5/lib/libfreshclam.2.dylib (compatibility version 3.0.0, current version 3.1.0)
    /usr/lib/libiconv.2.dylib (compatibility version 7.0.0, current version 7.0.0)
    /usr/lib/libbz2.1.0.dylib (compatibility version 1.0.0, current version 1.0.8)
    /usr/lib/libxml2.2.dylib (compatibility version 10.0.0, current version 10.9.0)
    /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1311.0.0)
    /usr/lib/libicucore.A.dylib (compatibility version 1.0.0, current version 68.2.0)
    /Users/my_user_name/Downloads/Tools/MacClam/clamav-installation-0.103.5/lib/libclammspack.0.dylib (compatibility version 2.0.0, current version 2.0.0)
    /Users/my_user_name/Downloads/Tools/MacClam/pcre2-installation-10.39/lib/libpcre2-8.0.dylib (compatibility version 11.0.0, current version 11.4.0)
    /usr/lib/libresolv.9.dylib (compatibility version 1.0.0, current version 1.0.0)
    /usr/lib/libcurl.4.dylib (compatibility version 7.0.0, current version 9.0.0)
    /usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.11)
    /System/Library/Frameworks/Security.framework/Versions/A/Security (compatibility version 1.0.0, current version 60157.60.19)
    /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation (compatibility version 150.0.0, current version 1856.105.0)