I know this is an old problem with ClamAV under Qmail-Scanner, but I cannot solve it.
Qmail/VPopMail running fine since 6 months on Mac OS X 10.2.
I installed ClamAV 0.60 with no problems.
When I installed Qmail-Scanner, I had the well known Perl-Suid problem.
Thus, I compiled and installed the qmail-scanner-queue C-Wrapper from the qmail-scanner-1.20rc4/contrib. I modified the properties of the two qmail-scanner-queue* in /var/qmail/bin as this:
#ls -la qmail-scan* -rwsr-xr-x 1 qmailq qmail 11572 Oct 17 11:02 qmail-scanner-queue -rwxr-xr-x 1 qmailq qmail 79106 Nov 12 12:29 qmail-scanner-queue.pl
Note the "s" bit for the C-Wrapper and the absence for the perl script.
Here is the important lines of my /var/qmail/supervise/qmail-smtpd/run script:
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue" ; export QMAILQUEUE
exec /usr/local/bin/softlimit -m 6000000 \
/usr/local/bin/tcpserver -H -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 24 /var/qmail/bin/qmail-smtpd 2>&1
The -R properties of /var/spool/qmailscan are "rwx------" as created by the qmail-scanner installer.
To be sure, I chown -R qmailq:qmail /var/spool/qmailscan
And now, the problems with the logs of qmail-scanner (qmail-queue.log) are the systematic "access denied" messages:
...
Tue, 11 Nov 2003 23:35:30 +0000:19285: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285"...
Tue, 11 Nov 2003 23:35:30 +0000:19285: scanloop: scanner=clamscan_scanner,plain_text_msg=0
Tue, 11 Nov 2003 23:35:30 +0000:19285: clamscan: starting scan of directory "/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285"...
Tue, 11 Nov 2003 23:35:30 +0000:19285: run /usr/local/bin/clamscan -r --disable-summary --max-recursion=10 --max-space=1000000 /var/spool/qmailscan/tmp/minouche.core.$
Tue, 11 Nov 2003 23:35:30 +0000:19285: --output of clamscan was:
/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285/1068590131.19287-0.minouche.core.ucl.ac.be: Access denied.
/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285/1068590131.19287-1.minouche.core.ucl.ac.be: Access denied.
/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285/orig-minouche.core.ucl.ac.be106859013046119285: Access denied.
--
Tue, 11 Nov 2003 23:35:30 +0000:19285: clamscan: finished scan of dir "/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285" in 0.183739 secs
Tue, 11 Nov 2003 23:35:30 +0000:19285: scanloop: finished scan of "/var/spool/qmailscan/tmp/minouche.core.ucl.ac.be106859013046119285"...
...
If I issue continous "ls -la" on /var/spool/qmailscan/tmp, I see that the files to be scanned has the next properties:
#ls -la
drwx------ 3 qmailq qmail 102 Nov 12 22:14 .
drwx------ 12 qmailq qmail 408 Nov 12 16:46 ..
drwx------ 2 qmailq qmail 68 Nov 12 22:25 minouche.core.ucl.ac.be106867166546227470
-rw------- 1 qmailq qmail 1804 Nov 12 22:25 1068672326.28051-0.minouche.core.ucl.ac.be
Who can help me? If you need more explanations/logs, don't hesitate to ask.
Many thanks in advance, Guy
-- ---------------------------------------------------------------------- Guy LOUIS ---------------------------------------------------------------------- Work: Center for Operation Research and Econometrics Universit� Catholique de Louvain Voie du Roman Pays, 34 1348 Louvain-la-Neuve mailto:[EMAIL PROTECTED] http://www.core.ucl.ac.be ---------------------------------------------------------------------- Home: 40, Rue de M�rivaux 1490 Court-St-Etienne mailto:[EMAIL PROTECTED] http://www.hippocrate.be ---------------------------------------------------------------------- T h i n k d i f f e r e n t - u s e a M a c i n t o s h ----------------------------------------------------------------------
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
