--- Stephen Gran <[EMAIL PROTECTED]> wrote:
> On Fri, Jul 29, 2005 at 03:21:35PM +1000, Kevin O'C
> said:
> > Hi All,
> >
> > debian sarge system
> >
> > logging in as root
> ^^^^^^^^^^^^^^^^^^^^
>
> > clam v8.X
> >
> > configured clamd.conf - do not have copy of file
> at
> > this location - will post if required.
> >
> > line in clamd.conf is this:
> > VirusEvent /whatever/whatever/xmessage "virus
> found"
> >
> > i have tested virus event command line in shell -
> > produces xmessage box with 'virus found'.
> > but when i run 'clamd /root' in terminal it
> detects
> > eicar virus at that location but does not run
> > xmessage.
> > i've checked clamd logs but nothing logged..
> >
> > i tried other virus events such as echo with no
> joy.
> > not sure if this is a security thing with clamd
> and
> > root..
> > i've spent hours working on clam and now finally
> got
> > everything croned and running, but it's next to
> > useless without virusevent!
> >
> > any help much appreciated
> > i have read other posts on this subject to no
> avail...
>
> I just realized that the problem is probably
> permissions related, but in
> a different direction. xmessage (like all x
> programs) probably needs
> some kind of xauth, and I'm not sure the user clamd
> runs as (clamav)
> will have permission to write to root's X session.
> I am not completely
> sure how X handles this sort of thing, but this is
> my next guess.
> --
>
>
--------------------------------------------------------------------------
> | Stephen Gran | You don't have to
> know how the computer |
> | [EMAIL PROTECTED] | works, just how
> to work the computer. |
> | http://www.lobefin.net/~steve |
> |
>
>
--------------------------------------------------------------------------
> > _______________________________________________
> http://lurker.clamav.net/list/clamav-users.html
>
i agree, all help and investigation points to
permissions.
i could look into upping the Xauth access of clamav
user account via group membership. Or, optionally, i
could run the daemon as root? i know this is not
recommended and also not sure how to do this - a
simple chown?
umm, what about a su to clamav user session and try to
run xmessage..
thanks for your help - will let you know how i go.
Kev
____________________________________________________
Do you Yahoo!?
Yahoo! Photos: Now with unlimited storage
http://au.photos.yahoo.com
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
