Actually, I figured this out about the same time I got this email. (: The
pointer would have been perfect though.
I'm running the qmail-toaster package(s). It has a separate RPM for Maildrop,
which includes the reformime. Apparently the whole package defaults to be
suid/sgid as root/qmail. So this was causing the problem when the scanner
script called reformime to parse it out for clamav. It would set all the
output root/qmail with 0600 perms, even though the directory structure would
be qscand/qscand.
Removing the suid/sgid bits on the reformime binary resolved my permissions
problem. Took me forever to figure that out, and I'm surprised nobody on
this list has run into this before. It would appear that all the maildrop
source defaults to root/mail even when you compile it unless you explicitly
tell it otherwise. Maybe everyone's telling it something else when they
compile. (:
-= Jay =-
-----Original Message-----
From: Jason Haar [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 29, 2003 6:46 PM
To: [EMAIL PROTECTED]
Subject: Re: [Qmail-scanner-general]Permissions
On Mon, Sep 29, 2003 at 01:51:38PM -0600, Jay Eno wrote:
>
> I'm having a problem trying to integrate clamscan with
> qmail-scanner. Basically, it tries to run the scanner on
> $scandir/$file_id/* but it doesn't seem to create the files in there
> with the correct permissions. The directory itself is all OK, but the
> files within are owned by root, and have a gid of qmail, with
> permissions of 0600. Hence, scanmail, spawned as a sub-process of
> qmail-scanner, can't read them.
Files are owned by root? You have something setuid root that shouldn't be...
*Every* file within the /var/spool/qmailscan dir should be owned by qscand.
No exceptions.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Qmail-scanner-general mailing list [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
