Re: [AMaViS-user] permissions on tmp directory

[Gary V <mr8...@gm...>]

On 11/23/09, Kevin Bailey <kb...@fr...> wrote:
> Hi,
>
> Using standard Debian/Lenny system with Amavisd-new installed from packages.
>
> ||/ Name                             Version
> Description
> +++-================================-================================-================================================================================
> ii  amavisd-new                      1:2.6.1.dfsg-1
> Interface between MTA and virus scanner/content filters
>
> and
>
> ||/ Name                             Version
> Description
> +++-================================-================================-================================================================================
> ii  postfix                          2.5.5-1.1
> High-performance mail transport agent
>
>
> I take it that these errors...
>
>
> Nov 23 16:36:14 per05 amavis[14608]: (14608-09) (!!)run_av
> (ClamAV-clamd) FAILED - unexpected ,
> output="/var/lib/amavis/tmp/amavis-20091123T091422-14608/parts: lstat()
> failed: Permission denied. ERROR\n"
> Nov 23 16:36:14 per05 amavis[14608]: (14608-09) (!!)ClamAV-clamd
> av-scanner FAILED: CODE(0x3a199b0) unexpected ,
> output="/var/lib/amavis/tmp/amavis-20091123T091422-14608/parts: lstat()
> failed: Permission denied. ERROR\n" at (eval 89) line 527.
> Nov 23 16:36:14 per05 amavis[14608]: (14608-09) (!!)WARN: all primary
> virus scanners failed, considering backups
>
> ...are to do with permissions.
>
> Could someone confirm what permissions I'm supposed to set up on what?
>
> I suppose I should open up permissions on /var/lib/amavis/tmp but don't
> want too much.  Maybe just adding the user clamav to the group amavis
> should be enough.
>
> Actually, was adding clamav to group amavis somewhere in the docs?
>
> bailey86
>
>
>
> --
> *Kevin Bailey*
> Director/Programmer - Freeway Projects Limited
> Web: www.freewayprojects.com <http://www.freewayprojects.com/>
> Email: kb...@fr... <mailto:kb...@fr...>
> Phone: +44 (0)1752 267090

gpasswd -a clamav amavis
/etc/init.d/clamav-daemon restart

Should do the trick.

Look for the text:

 # NOTE: remember to add the clamav user to the amavis group, and
 # to properly set clamd to init supplementary groups

in /etc/amavis/conf.d/15-av_scanners

-- 
Gary V