[Devil-linux-develop] Sagator and ClamAV interaction+integration on DL - minor fix

[Kari M. <ka...@tr...>]

This is for mail gateway implementations of Devil-Linux.

Sagator is a nice integrator between Postfix, SpamAssassin and ClamAV.

The default settings with DL are not working properly.  Previously I=20
sent a minor fix for SpamAssassin+Sagator.  This posting is for=20
ClamAV+Sagator.

You can do this in many different ways.  This way changes as little as=20
possible the default configuration.

I suggest you add to file /etc/sysconfig/jail/SAGATOR the following 3=20
lines to add the directory (with proper user rights) for virus definition=
s:

MKDIR /var/lib/clamav
CHMOD 750 /var/lib/clamav
CHOWN clamav:vscan /var/lib/clamav

A quick explanation:
/var/lib/clamav is the default directory for virus definitions. As=20
Sagator is executed jailrooted, this directory (actually=20
/var/spool/vscan/var/lib/clamav) does not exist.  This is also the=20
directory where Sagator excepts the virus defs to be.
ClamAV requires write access to this directory, but Sagator (user/group=20
vscan) only requires read+chdir access.

This change, however is not sufficient.  ClamAV is not executed=20
jailrooted.  That means the ClamAV default directory /var/lib/clamav=20
does not match with Sagator's /var/spool/vscan/var/lib/clamav.

Sagator's readme file recommends changing the following two files
/etc/freshclam.conf
/etc/clamd.conf

...and the change is simple:

DatabaseDirectory /var/spool/vscan/var/lib/clamav


You could leave the default line there as a commented one.

There is a minor drawback here: You have to remember to do this change=20
every time you upgrade ClamAV, and that is (fortunately) quite often.

***

As there is very little use on DL for ClamAV alone -- it is almost=20
always used with Sagator, I think the above DatabaseDirectory change=20
propably should make it to the default etc.tar.bz2.

Comments?



Terveisin/With kind regards/Med h=E4lsningar/Lugupidamisega,

Kari Mattsson
Trivore Corp.