Package: amavisd-new Version: 1:2.11.0-6.1 Severity: minor Dear Maintainer,
while reading the Debian specific documentation on how to setup amavisd-new with clamav-daemon, I found this stance in README.Debian: " If you use clamav-daemon, make sure that it is configured to init supplementary groups when it drops privileges, and that you add the clamav user to the amavis group: add AllowSupplementaryGroups to /etc/clamav/clamd.conf if it is not there yet, and run "adduser clamav amavis" as root. The preferred method for using other virus scanners which run as a different unprivileged user is to change their primary group to amavis (you can change this with "usermod -g"). " The AllowSupplementaryGroups has been deprecated for years (2016 maybe?) and this paragraph should be updated to clarify whether adding the clamav user to the amavis group is enough, or if the amavis group should be made primary to clamav as of now, or any other correct configuration path. Many thanks, -- Charles -- System Information: Debian Release: 10.5 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-10-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages amavisd-new depends on: ii adduser 3.118 ii debconf [debconf-2.0] 1.5.71 ii file 1:5.35-4+deb10u1 ii init-system-helpers 1.56+nmu1 pn libarchive-tar-perl <none> ii libarchive-zip-perl 1.64-1 ii libberkeleydb-perl 0.55-2 ii libconvert-tnef-perl 0.18-1 ii libconvert-uulib-perl 1:1.5~dfsg-1+b1 pn libdigest-md5-perl <none> ii libio-stringy-perl 2.111-3 ii libmail-dkim-perl 0.54-1 ii libmailtools-perl 2.18-1 pn libmime-base64-perl <none> ii libmime-tools-perl 5.509-1 ii libnet-libidn-perl 0.12.ds-3+b1 ii libnet-server-perl 2.009-1 ii libunix-syslog-perl 1.1-3+b1 ii lsb-base 10.2019051400 ii pax 1:20190224-1 ii perl [libtime-hires-perl] 5.28.1-6+deb10u1 Versions of packages amavisd-new recommends: ii altermime 0.3.10-9 ii libnet-patricia-perl 1.22-1+b5 pn ripole <none> Versions of packages amavisd-new suggests: pn apt-listchanges <none> ii arj 3.10.22-18 ii cabextract 1.9-1 ii clamav 0.102.4+dfsg-0+deb10u1 ii clamav-daemon 0.102.4+dfsg-0+deb10u1 ii cpio 2.12+dfsg-9 pn dspam <none> ii lhasa 0.3.1-3 ii libauthen-sasl-perl 2.1600-1 pn libdbi-perl <none> ii libmail-dkim-perl 0.54-1 pn libnet-ldap-perl <none> pn libsnmp-perl <none> pn libzeromq-perl <none> pn lzop <none> ii nomarch 1.4-3+b2 pn p7zip <none> pn rpm <none> ii spamassassin 3.4.2-1+deb10u2 ii unrar 1:5.6.6-1 -- no debconf information
