I'm having a similar problem to Terry since I upgraded clamav to debian version 0.73-2.
Log output shown below Thu, 15 Jul 2004 11:44:06 EST:2915: scanloop: scanner=clamdscan_scanner,plain_text_msg=0 Thu, 15 Jul 2004 11:44:06 EST:2915: clamdscan: starting scan of directory "/var/spool/qmailscan/tmp/ns1.stral.net10898558444802915"... Thu, 15 Jul 2004 11:44:06 EST:2915: run /usr/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space=100000 /var/spool/qmailscan/tmp/ns1.stral.net10898558444802915 2>&1 Thu, 15 Jul 2004 11:44:06 EST:2915: --output of clamdscan was: /var/spool/qmailscan/tmp/ns1.stral.net10898558444802915: Can't access the file ERROR -- Thu, 15 Jul 2004 11:44:06 EST:2915: error_condition: X-Qmail-Scanner-1.22: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 2 Michael Ralston Stral.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Letsche Sent: Thursday, 15 July 2004 12:01 AM To: Dean Mumby Cc: [EMAIL PROTECTED] Subject: Re: [Qmail-scanner-general]Permissions problem /var/spool/qmailscan/tmp Hmmm... My reformime looks like this: [EMAIL PROTECTED] terry]$ ls -l `which reformime` -rwxr-xr-x 1 bin bin 61020 Jul 13 16:51 /usr/bin/reformime I'd tried a number of things with it after seeing references to this in the archives, but none seemed to work! I even made a copy of it owned by qscand and called that instead, tried making it suid qscand, etc. Perhaps it's something even easier? There are two pieces I forgot to include earlier that might make a difference. The behavior appears to be the same whether -T is used as a parameter to perl or not, and secondly, I'm calling qmail-scanner-queue with a C wrapper script to make it suid, rather than use perl-suid. Terry On Wed, 14 Jul 2004, Dean Mumby wrote: > Terry Letsche wrote: > >> >> Hi. >> >> Files and directories are being created with the following >> permissions when checked by clamav: >> >> /var/spool/qmailscan/working/new/blah root.root 0600 >> /var/spool/qmailscan/tmp dirs are root.root 0700 >> >> This gives me the following errors in the logs: >> Tue, 13 Jul 2004 17:03:09 CDT:2410: ini_sc: start scanning Tue, 13 >> Jul 2004 17:03:09 CDT:2410: ini_sc: recursively scan the directory >> /var/spool/qmailscan/tmp/www.letsche.net10897561884822410/ >> Tue, 13 Jul 2004 17:03:09 CDT:2410: scanloop: starting scan of >> directory "/var/spool/qmailscan/tmp/www.letsche.net10897561884822410"... >> Tue, 13 Jul 2004 17:03:09 CDT:2410: scanloop: >> scanner=clamdscan_scanner,plain_text_msg=0 >> Tue, 13 Jul 2004 17:03:09 CDT:2410: clamdscan: starting scan of >> directory "/var/spool/qmailscan/tmp/www.letsche.net10897561884822410"... >> Tue, 13 Jul 2004 17:03:09 CDT:2410: run /usr/bin/clamdscan -r >> --disable-summary --max-recursion=10 --max-space=100000 >> /var/spool/qmailscan/tmp/www.letsche.net10897561884822410 2>&1 Tue, >> 13 Jul 2004 17:03:09 CDT:2410: --output of clamdscan was: >> /var/spool/qmailscan/tmp/www.letsche.net10897561884822410: Access denied. >> ERROR /var/spool/qmailscan/tmp/www.letsche.net10897561884822410: OK >> -- >> Tue, 13 Jul 2004 17:03:09 CDT:2410: error_condition: X-Qmail-Scanner-1.22: >> clamdscan: corrupt or unknown clamd scanner error or >> memory/resource/perms problem - exit status 2 >> >> This is with qmail-scanner 1.22, spamassassin 2.63, f-prot >> 4.4.2/3.14.11, maildrop 1.6.3.20040608-1.2, qmail 1.03 and clamav >> 0.74-1 on Fedora Core 2. I'm running clamd as user qscand, BTW. >> Changing ownership of reformime, as has been suggested didn't help. >> /var/spool/qmailscan/working and /var/spool/qmailscan/tmp are both >> owned by qscand.qscand, 0770. Removing clamdscan from scanner_array >> returns operation back to normal (using f-prot and spamassassin >> without clamav). >> >> I'm sure it's something obvious, but I can't put my finger on it! >> >> Thanks. >> >> Terry >> > check your permissions on reformine > > Regards > Dean > > Maybe its time this became a FAQ > > > -- Terry Letsche | http://terry.letsche.net | terry at letsche dot net ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
