- summary: VlamFS does not properly handle ACL --> ClamFS does not properly handle ACL
After using for some year libsamba-vscan (the on-access virus scanning
VFS module for samba) i've moved out of it, and looking for other tools
i've found your ClamFS.
I've tested it a bit, prove that works flawlessy and very efficiently,
good work!
Looking at the code it seems to me that support extended ACL and ATTR
(default on XFS, mount with 'acl,user_xattr' on many other FS).
I've not understood if this is a Fuse trouble or a ClamAV trouble, mut
seems that ClamFS is 'transparent' in ACL and ATTR handling but does
not take care of that in effective access.
In my setup:
gaio@neuromante:~$ df | grep srv
/dev/cciss/c0d0p8 368544580 139597632 228946948 38% /srv
clamfs 368544580 139597632 228946948 38% /srv/users
gaio@neuromante:~$ id gaio
uid=3D1000(gaio) gid=3D1004(ced) gruppi=3D20(dialout),24(cdrom),25(floppy),29(audio),44(video),46(plugdev),513(domusers),512(domadms),1004(ced),1102(webmaster),550(printops)
gaio@neuromante:~$ getfacl /srv/users/MOVE/
getfacl: Removing leading '/' from absolute path names
# file: srv/users/MOVE/
# owner: gabri
# group: move
user::rwx
group::rwx
group:ced:rwx
group:diramm:r-x
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:ced:rwx
default:group:diramm:r-x
default😷:rwx
default:other::---
gaio@neuromante:~$ getfacl /srv/.users/MOVE/
(the same result above)
gaio@neuromante:~$ ls /srv/users/MOVE/
ls: impossibile aprire la directory /srv/users/MOVE/: Permission denied
gaio@neuromante:~$ ls /srv/.users/MOVE/
ADESIONI tecnici ortopedici.rtf
...
Pratically /srv is a XFS filesystem with ACL and ATTR perfectly working,
with a folder /srv/.users/ that are remounted by the way of fuse/clamfs
to /srv/users.
As you can see if i look at ACl in /srv/.users/MOVE/ or in
/srv/users/MOVE/ i got the same result; indeed, i can set also the ACL.
But if i try to access the folder, the real filesystem permit me, the
fuse/clamfs remounted no.
Can you say me something?
PS: of course... debian lenny, clamfs standard 0.9.1-3
PPS: it is not a clamd permission trouble, clamd runs as root:
neuromante:~# ps aux | grep clam
root 3380 0.0 3.1 286340 127848 ? Ssl Jan07 1:20 /usr/sbin/clamd
clamav 3474 0.0 0.0 27820 1348 ? Ss Jan07 0:00 /usr/bin/freshclam -d --quiet
root 20468 0.0 0.0 7716 852 pts/1 S+ 09:28 0:00 grep clam