[SOLVED] clamav (group/user?)

coralfang · 09-21-2014, 08:49 AM

Using slackbuild:
http://slackbuilds.org/repository/14.1/system/clamav/

Added an account (/etc/passwd entry)

Code:

clamav:x:210:210::/home/clamav:/bin/bash

Added a group (/etc/group entry)

Code:

clamav:x:210:

Is that setup right?I started the rc.clamav script and it results in this when running the daemon:

Code:

# clamdscan /home/ricky/ -v
/home/ricky: lstat() failed: Permission denied. ERROR

----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)

Also one other thing, would it be better to use `vipw` and change the home to /dev/null and the shell to /bin/false , or does clav require those?

Drakeo · 09-21-2014, 10:42 AM

did you set it up to run like this points out.http://slackbuilds.org/slackbuilds/1...ADME.SLACKWARE
it needs to be executable.

coralfang · 09-21-2014, 01:14 PM

Quote:

Originally Posted by Drakeo

did you set it up to run like this points out.http://slackbuilds.org/slackbuilds/1...ADME.SLACKWARE
it needs to be executable.

I over looked that file, but i am not using sendmail or amavis.

I created the user/group with:

Code:

# useradd clamav -r -u 210

The rc script is executable and running, but clamdscan results in an error.

coralfang · 09-21-2014, 01:20 PM

Ah i think i solved it;

Code:

      --fdpass
              Pass the file descriptor permissions to clamd. This is useful if clamd is running as a different user as it is
              faster than streaming the file to clamd.  Only available if connected to clamd via local(unix) socket.

I added that to the arguments and it seems to work properly now.