[clamav-users] Configuration Test

2011-11-23 Thread Roman Gelfand
I have configured clamav to work with squid.  How can I test if, in fact,
infected files are blocked by clamav?

Thanks in advance
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Configuration Test

2011-11-23 Thread Tomasz Kojm
On Wed, 23 Nov 2011 13:04:00 -0500 Roman Gelfand 
wrote:
> I have configured clamav to work with squid.  How can I test if, in fact,
> infected files are blocked by clamav?

Use the eicar test file (www.eicar.org) or the test files distributed
with the clamav source package (created in the /test directory after
'make').

-- 
   oo. Tomasz Kojm 
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Wed Nov 23 19:18:00 CET 2011
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Configuration Test

2011-11-23 Thread Roman Gelfand
Thank you for your help.  What should happen when I try download the
problem files from (www.eicar.org)?  My browser is ie9.

On Wed, Nov 23, 2011 at 1:19 PM, Tomasz Kojm  wrote:

> On Wed, 23 Nov 2011 13:04:00 -0500 Roman Gelfand 
> wrote:
> > I have configured clamav to work with squid.  How can I test if, in fact,
> > infected files are blocked by clamav?
>
> Use the eicar test file (www.eicar.org) or the test files distributed
> with the clamav source package (created in the /test directory after
> 'make').
>
> --
>   oo. Tomasz Kojm 
>  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
> \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
>   //\   /\  Wed Nov 23 19:18:00 CET 2011
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Problems with permissions and clamav-unofficial-sigs

2011-11-23 Thread Alex
Hi,

>> clamd runs as user amavis.amavis, which is who should own
>> /var/lib/clamav and the files within, correct? And
>> /var/lib/clamav-unofficial-sigs is owned by clamupdate.clamupdate.
>>
>> freshclam.conf has the database owner set to amavis.
>
> I actually just finished a from-scratch setup like this, however, I'd 
> recommend not
> changing the default permissions/ownership of package files. I'd put all the 
> ClamAV stuff
> back to it's original ownership, add the user clamd runs as to the amavis 
> group, and set
> the "AllowSupplementalGroups" option to "yes" in the clamd.conf file. For the 
> places where
> they intereact, you then just need to make sure the amavis directories are 
> accessible by
> the amavis group.

I've enabled AllowSupplementalGroups, and the DatabaseOwner is
clamupdate, as per the default. I've also added amavis (the clamd
user) to the clamupdate group.

However, freshclam still fails to communicate with clamd with
"connect(): Permission denied" because the socket is owned by amavis.

# ls -l /var/spool/amavisd/clamd.sock
srw-rw-rw- 1 amavis amavis 0 Nov 21 23:28 /var/spool/amavisd/clamd.sock

# grep clam /etc/group /etc/passwd
/etc/group:clamupdate:x:498:amavis
/etc/passwd:clamupdate:x:498:498:Clamav database update
user:/var/lib/clamav:/bin/bash

# ls -ld /var/lib/clamav*
drwxr-xr-x. 2 clamupdate clamupdate 4096 Nov 24 00:45 /var/lib/clamav
drwxr-xr-x. 9 clamupdate clamupdate 4096 Nov 18 00:45
/var/lib/clamav-unofficial-sigs

I'd really appreciate if someone had some ideas to share on how to
resolve these permissions issues.

Thanks,
Alex
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml