> both clamd and clamav-milter are running as the clamav user....see my > output from the ps command: > > clamav 30686 0.0 0.5 38740 1440 ? S 09:58 0:00 > /usr/sbin/clamav-milter --quiet --dont-wait --force-scan > --dont-log-clean --server=localhost --quarantine > --quarantine-dir=/var/spool/clamav > --pidfile=/var/run/clamav/clamav-milter.pid > local:/var/run/clamav/clamav-milter.sock > clamav 30846 0.0 2.4 20112 6152 ? S 10:00 0:04 > /usr/sbin/clamd
You haven't shown the directory /var/spool/clamav. I would change the perms of that dir (/var/spool/clamav) to 777 for testing. If, it does indeed write there, you will see both the user and group that is creating the file. If it doesn't, then you will have to look further. But in any event, after determining what the problem is, lock that directory back to the minimum set of perms to function :) -- Ken -- Ken Jones [EMAIL PROTECTED] _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
