The good old "permission denied", the ignored group memberships, and a proposed solution

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed May 19 12:44:03 CEST 2021


>On Sat, 15 May 2021 17:29:40 +0100
>Dominic Raferd <dominic at timedicer.co.uk> wrote:
>
>> I believe that if you use the new preferred way of calling clamav
>> i.e. with --fdpass, the whole permissions issue disappears.
>>
>> Example:
>>
>> @av_scanners = (
>>    ['ClamAV-clamdscan', 'clamdscan', "--fdpass --stdout --no-summary
>> {}", [0], qr/:.*\sFOUND$/m, qr/^.*?: (?!Infected Archive)(.*)
>> FOUND$/m ], );

On 16.05.21 17:37, Luc Pardon wrote:
>Thanks, but no, it does not work, I still get "Permission denied". The
>wording is a little different, but the meaning is the same: no go.

I have in my notes:

adduser clamav amavis

this way, clamd can scan files extracted by amavis in its temporary
directory (e.g. --fdpass)

what are your permissions? 
I have "666" for clamav socket (debian):

srw-rw-rw- 1 clamav clamav 0 Apr 28 18:55 /run/clamav/clamd.ctl


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...


More information about the amavis-users mailing list