Patching updates on RHEL6 trusted server running SELINUX is increasing uvscan times with each update

[Former Member]

We have recently started patching a trusted RHEL6 server who key function is to organize, prioritize and scan xml files.  The original uvscan times were averaging 4 seconds per xml files.  The files sizes are relatively uniform.  Starting in May we began including applying monthly Linux patches including updates to the uvscan DAT files on this particular host.  After the first month the uvscan times increased to 45 seconds.  Then the next update they increased to 80 seconds per scan.  Now after the August patch the uvscan has increased to 300 seconds which make the server unusable for it's function.  While I can't rule out the Linux patches themselves which are mainly just kernel, ntp, and grafana modules to resolve know CVEs.  I'm assuming it is the update to the uvscan dat files that is causing the significant impact on uvscan times.  We have a script that we use on all the servers to install the updates which we have been using for a long time on all our servers and never had any issues.  I checked /usr/local/uvscan and the 3 files in there appear to be correct and consistent with permissions ownership and size with the other hosts.

avvscan.dat

avvname.dat

avvclean.dat

Any help or hints is greatly appreciated.

[gururaj]

Hi ,

Is the issue happening all the servers. what is version of the Uvscan
 ./uvscan --version

Kindly raise support case for more investigation.

Regards,

Gururaj.m.d

[Former Member]

All our linux servers are running McAfee VirusScan Command Line for Lunux64 Version: 6.04.56.564.

[gururaj]

Hi,

Thanks for the update, Did you get chance to raise the Support case  so the relevant team can look into the issue in depth. more investigation has to be Done.  

Regards,

Gururaj.m.d