I'll answer my own question and mark this SOLVED: my install of qmail-scanner-queue.pl was previously setuid and owned by qmailq.qmail
the fix was to get here: -rwsr-sr-x 1 qscand qmail 159312 Feb 8 09:15 qmail-scanner-queue.pl WHEW! Scanning logs indicate successful scanning of attachments now. THANKS for helping me to get back on track!!! On Mon, 08 Feb 2010 09:23:07 -0600, <i...@derdev.com> wrote: > qmail-scanner: my $debug=1000 > > r...@li112-80:/var/spool/qscan# ls -l > total 50892 > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 archives > -rwxr-x--- 1 qscand qmail 1434 Oct 12 09:13 log-report.sh > -rw-rw---- 1 qscand qmail 51986038 Feb 8 09:15 qmail-queue.log > -rw-rw---- 1 qscand qmail 63 Oct 12 09:13 > qmail-scanner-queue-version.txt > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 quarantine > -rw-r----- 1 qscand qmail 12288 Oct 12 09:16 quarantine-events.db > -rw-r----- 1 qscand qmail 10438 Oct 12 09:16 quarantine-events.txt > -rw-rw---- 1 qscand qmail 16211 Feb 1 10:22 quarantine.log > -rw-r----- 1 qscand qmail 2739 Oct 12 09:13 settings_per_domain.txt > drwxrwxr-x 4 qscand qmail 4096 Feb 8 09:15 tmp > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 working > > > r...@li112-80:/var/spool/qscan# ls -l tmp > total 8 > drwxr----- 2 qmailq qmail 4096 Feb 8 09:15 li112-80126564210578720703 > drwxr-x--- 2 qmailq qmail 4096 Feb 8 09:15 li112-80126564211878720729 > > r...@li112-80:/var/spool/qscan# ls -l tmp/li112-80126564210578720703/ > total 24 > -rwxr----- 1 qmailq qmail 15 Feb 8 09:15 1265642105.20705-0.li112-80 > -rwxr----- 1 qmailq qmail 7509 Feb 8 09:15 form.zip > -rw-rw---- 2 qmailq qmail 10951 Feb 8 09:15 > orig-li112-80126564210578720703 > > r...@li112-80:/var/spool/qscan# ls -l tmp/li112-80126564211878720729/ > total 8 > -rw-rw---- 1 qmailq qmail 997 Feb 8 09:15 1265642118.20731-0.li112-80 > -rw-rw---- 1 qmailq qmail 3862 Feb 8 09:15 > orig-li112-80126564211878720729 > > r...@li112-80:/var/spool/qscan# ls -la working/new/ > total 28 > drwxrwx--- 2 qscand qmail 4096 Feb 8 09:15 . > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 .. > -rw-rw---- 2 qmailq qmail 10951 Feb 8 09:15 li112-80126564210578720703 > -rw-rw---- 1 qmailq qmail 4134 Feb 8 09:15 li112-80126564211878720729 > r...@li112-80:/var/spool/qscan# ls -la working/cur/ > total 8 > drwxrwx--- 2 qscand qmail 4096 Oct 12 09:13 . > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 .. > r...@li112-80:/var/spool/qscan# ls -la working/tmp/ > total 8 > drwxrwx--- 2 qscand qmail 4096 Feb 8 09:15 . > drwxrwx--- 5 qscand qmail 4096 Oct 12 09:13 .. > > > > Looks like the problem is partly that the /tmp subfolders are owned by > user 'qmailq' instead of 'qscand'??? Where is that set? > Also, why perms 740 and 750 on the two folders in /tmp - why different? > > TIA > > > > On Mon, 08 Feb 2010 13:54:35 +1300, Jason Haar <jason.h...@trimble.co.nz> > wrote: >> On 02/07/2010 02:32 AM, i...@derdev.com wrote: >>> Sat, 06 Feb 2010 07:06:17 CST:20001: clamdscan: starting scan of >>> directory >>> "/var/spool/qscan/tmp/li112-80126546157778720001"... >>> Sat, 06 Feb 2010 07:06:17 CST:20001: run /usr/bin/clamdscan > --no-summary >>> /var/spool/qscan/tmp/li112-80126546157778720001 2>&1 >>> Sat, 06 Feb 2010 07:06:17 CST:20001: --output of clamdscan was: >>> /var/spool/qscan/tmp/li112-80126546157778720001: lstat() failed: >>> Permission denied. ERROR >>> >> Sounds like a setuid problem - are you sure you have sperl working and >> qmail-scanner-queue.pl setuid qscand? >> >> Anyway, first off we need to see the ownership and permissions of the >> files generating that error. If you edit qmail-scanner-queue.pl and set >> "my $DEBUG=" to 1000 instead of "1", then the next time you run QS, it >> won't auto-cleanup - ie the offending files will be left >> behind... >> >> That should help us home in on the problem. > > ------------------------------------------------------------------------------ > The Planet: dedicated and managed hosting, cloud storage, colocation > Stay online with enterprise data centers and the best network in the > business > Choose flexible plans and management services without long-term contracts > Personal 24x7 support from experience hosting pros just a phone call away. > http://p.sf.net/sfu/theplanet-com > _______________________________________________ > Qmail-scanner-general mailing list > Qmail-scanner-general@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
