On Fri, 13 Feb 2004 at  9:45:03 -0500, Pat Masterson wrote:
> I had the same problem trying to get the milter to be able to write that
> socket.
>  I found that once I "fixed" the permissions on /var/run/ to be open to
> clamav, sendmail complained of "unsafe" writeable directories, and
> wouldn't start.
> So I do this in my start scripts:
> 
> # start the clamav milter:
> chmod 777 /var/run
> /usr/local/sbin/clamav-milter -bloq /var/run/clmilter.sock
> sleep 5
> chmod 755 /var/run
> #
> 

Why not create a separate directories for clamav user (or whoever
it runs as - I use amavis).  Like:

$ ls -ld /var/run/clamav
drwxr-xr-x    2 amavis   amavis       4096 Feb  8 06:27 /var/run/clamav/

Then configure clamd to use other pidfile, etc.:

PidFile /var/run/clamav/clamd.pid
LocalSocket /var/run/clamav/clamd.ctl
User amavis

I even separated running clamd from updating database, so that clamd
couldn't mess with database (just in case).

$ ls -ld /var/lib/clamav
drwxr-xr-x    4 clamav   clamav       4096 Feb 13 02:44 /var/lib/clamav/

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to