philipp_subx at redfish-solutions
Feb 27, 2012, 4:49 PM
Views: 368
Permalink
|
|
Clamav packaging on Fedora
|
|
Hi.
I'm trying to figure out why the packaging on Fedora for clamav is so problematic, and what can be done to simplify things.
Following the latest (draft) directions that the clamav-server comes with, I've set things up as:
# cat /etc/tmpfiles.d/clamd.mimedefang.conf
d /var/run/clamd.mimedefang 0710 defang defang
# ls -ld /var/run/clamd.mimedefang/
drwx--x---. 2 defang defang 60 Feb 27 16:48 /var/run/clamd.mimedefang/
# cat /lib/systemd/system/clamd [at] mimedefang
[Unit]
Description = clamd scanner (%i) daemon
After = syslog.target nss-lookup.target network.target
[Service]
Type = simple
ExecStart = /usr/sbin/clamd -c /etc/clamd.d/%i.conf --nofork=yes
Restart = on-failure
PrivateTmp = true
# egrep '^[^#]' /etc/clamd.d/mimedefang.conf
LogFile /var/log/clamd.mimedefang
LogSyslog yes
LogFacility LOG_MAIL
ExtendedDetectionInfo yes
LocalSocket /var/run/clamd.mimedefang/scan.sock
LocalSocketMode 660
User defang
AllowSupplementaryGroups yes
# grep ClamdSock /etc/mail/mimedefang-filter
$ClamdSock = "/var/run/clamd.mimedefang/scan.sock";
# id clamscan
uid=488(clamscan) gid=473(clamscan) groups=473(clamscan)
# id defang
uid=491(defang) gid=478(defang) groups=478(defang)
#
but I still manage to see the following:
Feb 27 17:01:02 mail clamd[26580]: LibClamAV Error: cli_scanhtml: Can't create temporary directory /tmp/clamav-293c4b6ccd2f2904b61cb051fc92fb99
Feb 27 17:01:02 mail clamd[26580]: /var/spool/MIMEDefang/mdefang-q1S00uD0026813/Work/msg-26658-3.html: Can't create temporary directory ERROR
Feb 27 17:10:31 mail clamd[26580]: SelfCheck: Database status OK.
Feb 27 17:10:45 mail clamd[26580]: LibClamAV Error: cli_scanhtml: Can't create temporary directory /tmp/clamav-40cd21fa609116b32c9e4abf961df17e
Feb 27 17:10:45 mail clamd[26580]: /var/spool/MIMEDefang/mdefang-q1S0Aeo8026927/Work/msg-26658-11.html: Can't create temporary directory ERROR
since the directories being created are ephemeral, I don't get a chance to see what the actual file ownership, group, and permissions are.
Has anyone successfully set up mimedefang/clamav-server interaction on Fedora?
Thanks,
-Philip
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
|
Clamav packaging on Fedora
