Hi there,

On Mon, 12 Jul 2021, Robert Kudyba wrote:

ls -l / | grep var
...
drwxr-xr-x.  23 root root    4096 Jan 11 14:49 var
...
ls -l /var | grep lib
drwxr-xr-x. 95 root root 4096 Mar 20 08:00 lib

OK (assuming that you're *really* not using SELinux nor anything like it).

... /var/log/clam_perms.log ... populating for a couple of hours.

OK, we wait. :)

grep clam /etc/passwd
clamilt:x:989:985:Clamav Milter User:/var/run/clamav-milter:/sbin/nologin
clamav:x:985:981::/var/run/clamav:/sbin/nologin
clamupdate:x:983:979:Clamav database update user:/var/lib/clamav:/sbin/nologin
clamscan:x:982:978:Clamav scanner user:/:/sbin/nologin

Interesting.  The 'clamav' user seems not to have been created by the
same setup process which created the other three, since it didn't get
a text description.  There's a suspicious gap in the numeric IDs from
985:981 to 989:985 like the milter IDs were added later.  Make sense?

What does

grep clam /etc/group

give you?

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to