Hi, I am experiencing a problem running clamav on an OpenBSD machine. Apache comes chrooted by default (a configuration I want to keep) therefore when the apache user tries to scan a file it finds that no executable named clamscan or clamdscan is inside the chroot. Now I've tried to copy/synlink the executable(s) and the dependent files under the chroot and execute the scan however in my debug log file I always get:
UploadBase::detectVirus: running virus scan: /usr/local/bin/clamdscan --no-summary '/tmp/phpqkflgiwo' 2>&1 wfShellExec: /usr/local/bin/clamdscan --no-summary '/tmp/phpqkflgiwo' 2>&1 Possibly missing executable file: /usr/local/bin/clamdscan --no-summary '/tmp/phpqkflgiwo' 2>&1 UploadBase::detectVirus: failed to scan /tmp/phpqkflgiwo (code 127). >From the look of it it can't see the executable to even try to scan. If the >apache user (www) is running the scan and the same user is executing the scan >then permissions of usr/local/bin/clamdscan is 555 (all the way through the >path) then it seems it should at least be able to find the file. An odd but >seemingly unrelated problem is that the temporary directory is set to /tmp >(within the chroot) even though $wgTmpDirectory is set to /htdocs/wiki/images >and in php settings they're set to /htdocs/temp. Trying to compile clamav >with the --prefix and --exec-prefix options set inside the chroot doesn't >result in the program being installed inside the chroot. If I could just tell clamdscan to talk with the clamd socket that would be nice but it doesn't appear to be practical. It looks like installing clamav inside the chroot path should help but it isn't working as I had hoped. I made a test php script that executes the shell command that mediawiki does (from the wfShellExec function in GlobalFunctions.php) and directly put the desired command for a test file within the chroot and it still behaves the same way when invoked directly on the command line "php test.php". If someone has any suggestions on how to get these programs to work together I'd like to see them. Thanks in advance! _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
