On 5/17/05, Dennis Peterson <[EMAIL PROTECTED]> wrote:
> You said it shouldn't log to / and there's no reason it shouldn't if that
> is where one wishes it to log. There's lots of reasons why that would be a
> bad idea, but it's an admin decision, not an application issue.

It sounds like clam is creating the log files *before* the root
startup process hands over control to the user defined in the config
files.  In 0.84 and prior, it sounds like there was something that
handed off an open filehandle to the defined user, but that filehandle
was opened by root...  I'm not sure if that's possible or not, so
please correct me if I'm wrong..  :)

It seems that the current behaviour is more correct, but still not
completely correct..  I would expect that when clamav starts, all
control should be handed to the defined user immediately and then
files should be created, opened, etc...

It's possible that the current problems are mostly due to pre-existing
logfiles that are already owned by root, as opposed to new
installations.  To be honest, I haven't tried a new install to see if
the files are still created with "improper" permissions.

> dp ... did I mention I'm anal?

Isn't anal a required attribute for those who are security conscious?  ;)

-- 
Jason 'XenoPhage' Frisvold
[EMAIL PROTECTED]
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to