John Peacock wrote:
Robin Bowes wrote:

usermod -G smtpd clamav
chmod g+x /home/smtpd /home/smtpd/tmp


That should be:

chmod g+r /home/smtpd/tmp

OK, changed to that.


you should't /need/ to change the parent directory. clamd only needs group _read_ access to the folder. For testing purposes, copy a file into that folder (preferrably with an infected attachment) and set the ownership to smtpd and permissions to 0640, then try and use clamdscan manually.

Also removed the parnet directory permission.

2005-02-24 20:20:47.044802500 Permissions on spool_dir /home/smtpd/tmp/ are not 0700 at lib/Qpsmtpd.pm line 274, <ST
DIN> line 16.


That's a warning from the new spool_dir() code, not an error. Are you seeing an error later on when clamdscan itself is run?

Yes:

2005-02-24 20:51:27.070288500 4580 running plugin (data_post): virus::clamav
2005-02-24 20:51:27.071651500 4580 virus::clamav plugin: Changing permissions on file to permit scanner access
2005-02-24 20:51:27.071825500 4580 virus::clamav plugin: Running: /usr/bin/clamdscan --stdout --disable-summary /home/smtpd/tmp/qpsmtpd.clamav.4580.UDH0Nh 2>&1
2005-02-24 20:51:27.080135500 4580 virus::clamav plugin: clamscan results: /home/smtpd/tmp/qpsmtpd.clamav.4580.UDH0Nh: Access denied. ERROR
2005-02-24 20:51:27.080317500 4580 virus::clamav plugin: ClamAV error: /usr/bin/clamdscan --stdout --disable-summary /home/smtpd/tmp/qpsmtpd.clamav.4580.UDH0Nh 2>&1: 2


R.
--
http://robinbowes.com

Reply via email to