Permission denied between clamav-daemon and amavisd-new on Ubuntu 9.04 .

cviniciusm · 04-30-2009, 05:30 AM

Hello,

I'm trying to use clamav-daemon with amavisd-new, but I'm getting the following errors.

Any ideas, please?

I'm using Ubuntu 9.04 and the following packages:
amavisd-new 1:2.6.2-2ubuntu2
clamav 0.95.1+dfsg-1ubuntu1
clamav-daemon 0.95.1+dfsg-1ubuntu1
postfix 2.5.5-1.1
dovecot-common 1:1.1.11-0ubuntu4
dovecot-imapd 1:1.1.11-0ubuntu4
dovecot-pop3d 1:1.1.11-0ubuntu4

Code:

/var/log/mail.err:
"
...
... amavis[19678]: (19678-02-2) (!!)run_av (ClamAV-clamd) FAILED - unexpected , output="/var/lib/amavis/tmp/amavis-2009
0430T054622-19678/parts: lstat() failed: Permission denied. ERROR\n"
... amavis[19678]: (19678-02-2) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x92f8a00) unexpected , output="/var/lib/amavi
s/tmp/amavis-20090430T054622-19678/parts: lstat() failed: Permission denied. ERROR\n" at (eval 98) line 543.
...
"

/var/log/clamav/clamav.log:
"
...
WARNING: lstat() failed on: /var/lib/amavis/tmp/amavis-20090430T054622-19678/parts
...
"

/etc/postfix/master.cf:
"
...
smtp-amavis     unix    -       -       -       -       2       smtp
        -o smtp_data_done_timeout=1200
        -o smtp_send_xforward_command=yes
        -o disable_dns_lookups=yes
        -o max_use=20

127.0.0.1:10025 inet    n       -       -       -       -       smtpd
...
"

/etc/amavis/conf.d/15-av_scanners:
"
...
 ### http://www.clamav.net/
 ['ClamAV-clamd',
   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.ctl"],
   qr/\bOK$/, qr/\bFOUND$/,
   qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
 # NOTE: remember to add the clamav user to the amavis group, and
 # to properly set clamd to init supplementary groups
 # When running chrooted one may prefer: ["CONTSCAN {}\n","$MYHOME/clamd"],
...
"

# groups clamav
clamav amavis

TIA,
cviniciusm.

bathory · 04-30-2009, 05:44 AM

Quote:

# NOTE: remember to add the clamav user to the amavis group, and
# to properly set clamd to init supplementary groups

Have you done the above? You have added amavis to clamav group and not the other way around.
Also don't forget to uncomment the "AllowSupplementaryGroups" option in clamd.conf and restart both clamd and amavisd.

Regards

cviniciusm · 04-30-2009, 06:21 AM

Hello,

Yes, I added clamav user to the amavis group.

The "AllowSupplementaryGroups" is true and uncommented by default.

I restarted the daemons.

Now, they are working fine.

Thanks for the reply,
cviniciusm.

prismasupport · 07-04-2009, 03:21 AM

Hey Bathory!

Just wanted to say thanks. This also worked for me.

"Have you done the above? You have added amavis to clamav group and not the other way around.
Also don't forget to uncomment the "AllowSupplementaryGroups" option in clamd.conf and restart both clamd and amavisd."

frlarry · 09-07-2009, 03:34 PM

That's just what I was looking for, too. Thanks.

jmontano · 02-01-2010, 12:35 PM

Thanks for your info, got it right by fixing clamav group membership