Dear developers,
clamav-freshclam's postinst script uses `update-rc.d` and `invoke-rc.d`
commands, which prevents `debhelper` to add the right
`deb-systemd-helper` commands to enable the service (which AFAIK
*should* be done by `update-rc.d`, but for a reason I didn't dig into,
is not).
Intuitively I'd say that the solution is to complete the `update-rc.d`
and `invoke-rc.d` with their `deb-systemd-helper` counterparts in the
maintainer scripts, mimicking what `debhelper` would do.
Another solution would be to simply remove all occurrences of those
calls (including DO_RUN_AS_EVALUATION in the postinst) and let
`debhelper` do its job, since it seems that both the systemd service and
the SysV init script correctly handle the cron case, and the ifupdown
script correctly handles the daemon case (but I'm not sure about the
other combinations).
Or just plainly remove ifupdown, cron and manual methods, letting the
daemon just start when the network becomes available.
Setting the severity as important because it renders the package useless
(the service never starts after the first reboot, so the signatures are
never updated after that), though IMHO it should be set as critical
since, as the signatures would quickly become obsolete, it gives the
user a false sense of security.
This should also IMHO qualify for the fix to be propagated to stable by
a security update.
Regards,