Some progress made. For this next test I copied eicar.com to /tmp and have it owned by uid and gid of clamscan.
Run as root, this fails: #clamdscan -c /etc/clamd.d/scan.conf eicar.com /tmp/eicar.txt: lstat() failed: No such file or directory. ERROR Run as root or as a normal user, this somewhat succeeds: $ cat eicar.com | clamdscan -c /etc/clamd.d/scan.conf /tmp: OK ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.000 sec (0 m 0 s) I say somewhat, because no virus is detected but no error is thrown. But even more strange: [root@zzzz tmp]# clamdscan -c /etc/clamd.d/scan.conf /tmp /tmp: OK ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.000 sec (0 m 0 s) [root@zzzz tmp]# clamdscan -c /etc/clamd.d/scan.conf /tmp/eicar.com /tmp/eicar.com: lstat() failed: No such file or directory. ERROR ----------- SCAN SUMMARY ----------- Infected files: 0 Total errors: 1 Time: 0.001 sec (0 m 0 s) [root@ears tmp]# The command does not fail on the scan of the directory but it finds no virus in eicar.com. However the command fails on the scan of the file. -----Original Message----- From: Benny Pedersen [mailto:m...@junc.eu] Sent: Saturday, November 21, 2015 08:34 To: Daniel L. Srebnick <d...@islenet.com>; 'Kevin A. McGrail' <kmcgr...@pccc.com>; users@spamassassin.apache.org Subject: RE: ClamAV.pm Plugin Not Working On November 21, 2015 12:35:55 PM "Daniel L. Srebnick" <d...@islenet.com> wrote: > Reformed command to eliminate access to /home/dan as an issue: > cat eicar.txt | clamdscan -c /etc/clamd.d/scan.conf > /home/dan: lstat() failed: Permission denied. ERROR > clamdscan -c /etc/clamd.d/scan.conf eicar.txt > /home/dan/eicar.txt: lstat() failed: Permission denied. ERROR clamdscan need to be called as root
