Re: ClamAV.pm Plugin Not Working

2015-11-23 Thread Matus UHLAR - fantomas
On 21.11.15 20:26, Daniel L. Srebnick wrote: The directory containing the socket file must be world readable and executable. Because was in my case owned by clamscan/clamscan, spamd could not write to it. I figured this out by running spamd as root for a bit and saw that everything worked. ma

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Daniel L. Srebnick
The issue is now resolved. The directory containing the socket file must be world readable and executable. Because was in my case owned by clamscan/clamscan, spamd could not write to it. I figured this out by running spamd as root for a bit and saw that everything worked. Thanks everyone for th

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Daniel L. Srebnick
So here is what I found over on clamav-users list... Someone suggested calling clamdscan with --fdpass. When I do that, I can run clamdscan as a normal user and get a result. [me@ ~]$ clamdscan -c /etc/clamd.d/scan.conf eicar.txt /home/me/eicar.txt: lstat() failed: Permission denied. ERROR

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Daniel L. Srebnick
Thanks to all for the suggestions thus far. I will be taking this to the clamav-users list to see what they suggest. Regards Dan

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Daniel L. Srebnick
08:34 To: Daniel L. Srebnick ; 'Kevin A. McGrail' ; users@spamassassin.apache.org Subject: RE: ClamAV.pm Plugin Not Working On November 21, 2015 12:35:55 PM "Daniel L. Srebnick" wrote: > Reformed command to eliminate access to /home/dan as an issue: > cat eicar.txt |

Re: ClamAV.pm Plugin Not Working

2015-11-21 Thread Kevin A. McGrail
On 11/20/2015 10:17 PM, John Hardin wrote: On Fri, 20 Nov 2015, Kevin A. McGrail wrote: What user is clamd running as because why would it have access to /home/dan? Overall you appear to have a basic clamd functionality issue. If it *is* a problem with clamd functionality, I'd suggest there

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Benny Pedersen
On November 21, 2015 12:35:55 PM "Daniel L. Srebnick" wrote: Reformed command to eliminate access to /home/dan as an issue: cat eicar.txt | clamdscan -c /etc/clamd.d/scan.conf /home/dan: lstat() failed: Permission denied. ERROR clamdscan -c /etc/clamd.d/scan.conf eicar.txt /home/dan/eicar.tx

RE: ClamAV.pm Plugin Not Working

2015-11-21 Thread Daniel L. Srebnick
. McGrail [mailto:kmcgr...@pccc.com] Sent: Friday, November 20, 2015 21:34 To: dans ; users@spamassassin.apache.org Subject: Re: ClamAV.pm Plugin Not Working What user is clamd running as because why would it have access to /home/dan? Overall you appear to have a basic clamd functionality issue

Re: ClamAV.pm Plugin Not Working

2015-11-20 Thread John Hardin
On Fri, 20 Nov 2015, Kevin A. McGrail wrote: What user is clamd running as because why would it have access to /home/dan? Overall you appear to have a basic clamd functionality issue. If it *is* a problem with clamd functionality, I'd suggest there's still a bug in SA. It should not be emitt

Re: ClamAV.pm Plugin Not Working

2015-11-20 Thread Dave Wreski
clamdscan -c /etc/clamd.d/scan.conf eicar.txt /home/dan/eicar.txt: lstat() failed: Permission denied. ERROR It looks to be related to clamdscan performing a chroot() and the files you're referencing not being available from within that chroot. Try passing the --stream option. -bash-4.3$ cl

Re: ClamAV.pm Plugin Not Working

2015-11-20 Thread Kevin A. McGrail
What user is clamd running as because why would it have access to /home/dan? Overall you appear to have a basic clamd functionality issue. Regards, KAM On November 20, 2015 8:08:55 PM EST, dans wrote: >I set selinux to permissive and the same error persists. So we can >rule out >selinux. > >cla

Re: ClamAV.pm Plugin Not Working

2015-11-20 Thread dans
I set selinux to permissive and the same error persists. So we can rule out selinux. clamdscan -c /etc/clamd.d/scan.conf eicar.txt /home/dan/eicar.txt: lstat() failed: Permission denied. ERROR --- SCAN SUMMARY --- Infected files: 0 Total errors: 1 Time: 0.001 sec (0 m 0 s) Also

Re: ClamAV.pm Plugin Not Working

2015-11-19 Thread Bill Cole
On 19 Nov 2015, at 5:20, Daniel L. Srebnick wrote: That means user clamscan cannot read the file eicar. This is idenepdant of the user that launchs clamdscan. Try to put eicar.txt in /tmp and make it mode 777. I did so. Clamdscan still does not see the file and returns an lstat error. I ev

Re: ClamAV.pm Plugin Not Working

2015-11-19 Thread Daniel L. Srebnick
Olivier wrote: > OK. have you checked the socket? > > In your configuration file you should have LocalSocket /some/path/... > > Does it belong to UID/GID clamscan? > > Is it mode 666? srw-rw-rw-. 1 clamscan clamscan 0 Nov 19 04:22 clamd.sock

Re: ClamAV.pm Plugin Not Working

2015-11-19 Thread Matus UHLAR - fantomas
That means user clamscan cannot read the file eicar. This is idenepdant of the user that launchs clamdscan. Try to put eicar.txt in /tmp and make it mode 777. On 19.11.15 05:20, Daniel L. Srebnick wrote: I did so. Clamdscan still does not see the file and returns an lstat error. I even made

RE: ClamAV.pm Plugin Not Working

2015-11-19 Thread Kevin A. McGrail
’ll ask you my question about Perl “glue” after I work out >the clamdscan issue. > > > >Thanks both so far… > > > >From: Kevin A. McGrail [mailto:kmcgr...@pccc.com] >Sent: Wednesday, November 18, 2015 22:46 >To: Olivier Nicole >Cc: d...@islenet.com; users@spam

Re: ClamAV.pm Plugin Not Working

2015-11-19 Thread Olivier Nicole
"Daniel L. Srebnick" writes: >> That means user clamscan cannot read the file eicar. This is idenepdant of >> the user that launchs clamdscan. Try to put eicar.txt in /tmp and make it >> mode 777. > > I did so. Clamdscan still does not see the file and returns an lstat error. > I even made c

RE: ClamAV.pm Plugin Not Working

2015-11-19 Thread Daniel L. Srebnick
> That means user clamscan cannot read the file eicar. This is idenepdant of > the user that launchs clamdscan. Try to put eicar.txt in /tmp and make it > mode 777. I did so. Clamdscan still does not see the file and returns an lstat error. I even made clamscan/clamscan the owner. -rwxrwxrw

Re: ClamAV.pm Plugin Not Working

2015-11-19 Thread Olivier Nicole
Olivier Nicole > Cc: d...@islenet.com; users@spamassassin.apache.org > Subject: Re: ClamAV.pm Plugin Not Working > > > > Just starting with basics because I think this is a 3rd party plugin. Perhaps > clam daemon isn't running. > Regards, > KAM > > On Novemb

RE: ClamAV.pm Plugin Not Working

2015-11-19 Thread Daniel L. Srebnick
… From: Kevin A. McGrail [mailto:kmcgr...@pccc.com] Sent: Wednesday, November 18, 2015 22:46 To: Olivier Nicole Cc: d...@islenet.com; users@spamassassin.apache.org Subject: Re: ClamAV.pm Plugin Not Working Just starting with basics because I think this is a 3rd party plugin. Perhaps clam

Re: ClamAV.pm Plugin Not Working

2015-11-18 Thread Kevin A. McGrail
Just starting with basics because I think this is a 3rd party plugin. Perhaps clam daemon isn't running. Regards, KAM On November 18, 2015 10:40:03 PM EST, Olivier Nicole wrote: >Hi, > >> On November 18, 2015 6:49:16 PM EST, "Daniel L. Srebnick" > wrote: >>>Yes it does: >>> >>> >>> >>>clamsca

Re: ClamAV.pm Plugin Not Working

2015-11-18 Thread Paul Arthur
On 2015-11-19, Daniel L. Srebnick wrote: > David B. Funk asked: > >> Have you used the ClanAV.pm plugin successfully in a previous SA kit? > > No, I have not used it previously. > >> There are some requirements that must be satisfied (must have a clamd > running on the same machine as spamd, File

Re: ClamAV.pm Plugin Not Working

2015-11-18 Thread Olivier Nicole
Hi, > On November 18, 2015 6:49:16 PM EST, "Daniel L. Srebnick" > wrote: >>Yes it does: >> >> >> >>clamscan eicar.txt Using clamscan, you only prove that ClamAV is working. Your error was in the Perl glue between SpamAssassin and ClamAV, not in ClamAV. Best regards, Olivier >> >>eicar.txt:

RE: ClamAV.pm Plugin Not Working

2015-11-18 Thread Kevin A. McGrail
What about clamdscan? I think that might mimic things better. Regards, KAM On November 18, 2015 6:49:16 PM EST, "Daniel L. Srebnick" wrote: >Yes it does: > > > >clamscan eicar.txt > >eicar.txt: Eicar-Test-Signature FOUND > > > >--- SCAN SUMMARY --- > >Known viruses: 4110717 >

RE: ClamAV.pm Plugin Not Working

2015-11-18 Thread Daniel L. Srebnick
David B. Funk asked: > Have you used the ClanAV.pm plugin successfully in a previous SA kit? No, I have not used it previously. > There are some requirements that must be satisfied (must have a clamd running on the same machine as spamd, File::Scan::ClamAV perl module, etc). All requirements h

RE: ClamAV.pm Plugin Not Working

2015-11-18 Thread Daniel L. Srebnick
Yes it does: clamscan eicar.txt eicar.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Known viruses: 4110717 Engine version: 0.98.7 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 6.976 sec