> I've enabled AllowSupplementalGroups, and the DatabaseOwner is > clamupdate, as per the default. I've also added amavis (the clamd > user) to the clamupdate group. > > However, freshclam still fails to communicate with clamd with > "connect(): Permission denied" because the socket is owned by amavis. > > # ls -l /var/spool/amavisd/clamd.sock > srw-rw-rw- 1 amavis amavis 0 Nov 21 23:28 /var/spool/amavisd/clamd.sock
I think the AllowSupplementaryGroups option will only apply to clamd, not freshclam, so adding the clamupdate to the amavis group may not help. If it's still having a problem, my first guess would be that /var/spool/amavisd isn't world-executable? -- Bryan Burke IT Administrator Department of Electrical Engineering and Computer Science University of Tennessee, Knoxville bbu...@eecs.utk.edu (865) 974-4694 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml