On Fri, Jul 29, 2005 at 03:21:35PM +1000, Kevin O'C said:
> Hi All,
> 
> debian sarge system
> 
> logging in as root
^^^^^^^^^^^^^^^^^^^^

> clam v8.X
> 
> configured clamd.conf - do not have copy of file at
> this location - will post if required.
> 
> line in clamd.conf is this:
> VirusEvent /whatever/whatever/xmessage "virus found" 
> 
> i have tested virus event command line in shell -
> produces xmessage box with 'virus found'.
> but when i run 'clamd /root' in terminal it detects
> eicar virus at that location but does not run
> xmessage. 
> i've checked clamd logs but nothing logged..
> 
> i tried other virus events such as echo with no joy.
> not sure if this is a security thing with clamd and
> root..
> i've spent hours working on clam and now finally got
> everything croned and running, but it's next to
> useless without virusevent!
> 
> any help much appreciated
> i have read other posts on this subject to no avail...

I just realized that the problem is probably permissions related, but in
a different direction.  xmessage (like all x programs) probably needs
some kind of xauth, and I'm not sure the user clamd runs as (clamav)
will have permission to write to root's X session.  I am not completely
sure how X handles this sort of thing, but this is my next guess.
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | You don't have to know how the computer |
|  [EMAIL PROTECTED]             | works, just how to work the computer.   |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to