howdy-

i'm in the process of building a server for a client, and in the process i'm updating my own "install scripts" to use qmail-scanner 2.01.

my normal "./configure" line from qmail-scanner 1.25 looks like this:

./configure \
        --spooldir /var/qmail/scan \
        --admin virus \
        --domain ___ \
        --notify recips,admin \
        --log-details syslog \
        --qs-user clamav \
        "$@"

i read through the docs for 2.01 and updated the command to include the "--batch" option (thanks jason, this was a really good idea, i don't remember ever seeing it before.)

when i ran my script, it barfed because "qmail-scanner-queue.pl -g" died with error code 111. qmail-scanner didn't print any kind of error message, it looks like it just died with "exit 111" in the code or something.

so i tracked it down. it turns out that even though i'm using the "-- spooldir /var/qmail/scan" option, the installer still put several files in /var/spool/qscan... and did not properly set the permissions on the /var/spool/qscan directory, or on the quarantine-events.txt and quarantine.log files within the directory, so that the qs-user (normally qscand, and in my case clamav) has permissions to read and/ or write these files as appropriate. the qs-user should also own the directory itself, so that if the quarantine.log file doesn't exist, qmail-scanner will be able to create it.

that's a side issue. reading through the docs, i expected that because of my "--spooldir" option, that all of these files would be present under /var/qmail/scan (which is where i've always installed the qmail-scanner stuff, just my personal preference.)

so i tracked THIS down. it turns out that the "configure" script has a few options which are not documented- specifically the "--etcdir" and "--logdir" options. when i added them to my "./configure" command line, everything seems to be working perfectly.

so two things need to be fixed:

- if ETCDIR and/or LOGDIR are not the same as SPOOLDIR, you need to properly set the ownership and permissions of the files when "./ configure ... --install" creates them.

- the "--etcdir" and "--logidr" options need to be added to the output of "./configure --help".

and to clarify for anybody else who reads this and didn't follow the changes, this is the command line which is working on the client's server:

./configure --batch \
        --spooldir /var/qmail/scan \
        --etcdir /var/qmail/scan \
        --logdir /var/qmail/scan \
        --admin virus \
        --domain ___ \
        --notify recips,admin \
        --scanners clamdscan \
        --log-details syslog \
        --qs-user clamav \
        "$@"

and the last "$@" in there is because my script actually writes this command line to a script called "go", which (1) documents the command line used to build the software, and (2) makes it easy to run the exact same command twice- once as "./go" to test it, and once as "./ go --install" to actually install it.

--------------------------------------------------
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/           <[EMAIL PROTECTED]> |
--------------------------------------------------
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.      |
--------------------------------------------------


Attachment: PGP.sig
Description: This is a digitally signed message part

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to