eTrust Virus Scanner

[Hancock, Scott]

Kevin,

I've been meaning to reply to your previous post.  I've followed your
suggestion as outlined below.  I did not have success.  

If I test through putty and su as mail I get the following.

:/usr/src$ /opt/eTrustAntivirus/ino/bin/inocmd32
/opt/eTrustAntivirus/ino/bin/inocmd32: error while loading shared
libraries: libarclib.so: cannot open shared object file: No such file or
directory

If I putty in as a user then su to root, I also get the same error.  If
I Putty in as root (bad I know), I do not get an error.  Mailscanner
does not report etrust scanning with clam in the txt file with an eicar
test attachment.  Is there a better test?

I read about the required reboot associated  with this message.  Without
a reboot even a direct root logon will not work conversely with a reboot
root works.

My config

>From etc/group:  etrust:x:51:mail


bambam:/opt/eTrustAntivirus# ls -la /opt/eTrustAntivirus/ino/bin/
total 1284
drwxr-xr-x    2 root     root         4096 Feb 13  2003 .
drwxr-xr-x   13 root     root         4096 Feb 13  2003 ..
-r-xr-xr-x    1 root     root         6128 Feb 10  2003 AVProductName
-r-xr-xr-x    1 root     root         6644 Feb 10  2003 Decript
-r-xr--r--    1 root     root       315912 Feb 13  2003 InoNmSrv
-r-xr--r--    1 root     root       163372 Feb 13  2003 InoRT
-r-xr--r--    1 root     root       109620 Feb 13  2003 InoRpc
-r-xr--r--    1 root     root       161772 Feb 13  2003 InoTask
-r-xr-xr-x    1 root     root        50169 Feb 13  2003 caipconfig
-r-xr-xr-x    1 root     root         5204 Feb 10  2003 cawhence
-r-xr-xr-x    1 root     root        45716 Feb 13  2003 eavdisc
-rwsr-x---    1 root     etrust      70056 Feb 13  2003 inocmd32
-r-xr-xr-x    1 root     root        12668 Feb  4  2003 inolgset
-r-xr-xr-x    1 root     root         5068 Feb 10  2003 inoregbin
-r-xr--r--    1 root     root       252848 Feb 13  2003 inoweb
-r-xr-xr-x    1 root     root        12404 Feb 13  2003 regutil
-r-xr-xr-x    1 root     root         9428 Feb 13  2003 servutil
-r-xr-xr-x    1 root     root         3316 Feb 10  2003 shmnattach
-r-xr-xr-x    1 root     root         5200 Feb 10  2003 threadtest


:/opt/eTrustAntivirus# printenv |grep CAI
CAIGLBL0002=CACRITMON
CAIGLBL0000=/opt/eTrustAntivirus
CAIUNIDB=caiunidb
CAIGLBL0006=CASNMPMGR
CA_CAILANGUAGE=enu
CAI_CAMSGF_OPRDIRECT=
CAI_DATEFMT=MMM-DD-YYYY
CA_CAIMESSAGE=/opt/eTrustAntivirus/messages/american



Are you running etrust and exim?  If so, I'd be very grateful if you
could help me find the error in my setup.

Maybe email off list if appropriate.

Thanks

Scott


>From you first email...

ls -l /path/to/inocmd32 > some-file     # In case is doesn't work & you
                                        # wanta to change it back! 

groupadd -g 51 etrust  # I picked 51, you said below 500.
usermod -G etrust mail 
chown root:etrust /path/to/inocmd32 
chmod 4750 /path/to/inocmd32


(Whilst SUID isn't often a good idea this at least restricts it to only
the one user.)


CAIGLBL0000=<name of current directory>; export CAIGLBL0000






 >-----Original Message-----
 >From: Spicer, Kevin [mailto:Kevin.Spicer at BMRB.CO.UK] 
 >Sent: Friday, September 12, 2003 9:52 AM
 >To: MAILSCANNER at JISCMAIL.AC.UK
 >Subject: Re: eTrust Virus Scanner
 >
 >
 >Hancock, Scott wrote:
 >> 3.  Linux:  Their command line scanner needs to run as root. So my 
 >> exim MTA will not work.
 >> 
 >There are ways and means, create a group (say etrust)  then 
 >chmod the exe to setuid root, group etrust, permissions 750 
 >and add the exim user to the etrust group.
 >
 >
 >
 >BMRB International 
 >http://www.bmrb.co.uk
 >+44 (0)20 8566 5000
 >_________________________________________________________________
 >This message (and any attachment) is intended only for the 
 >recipient and may contain confidential and/or privileged 
 >material.  If you have received this in error, please contact the 
 >sender and delete this message immediately.  Disclosure, copying 
 >or other action taken in respect of this email or in 
 >reliance on it is prohibited.  BMRB International Limited 
 >accepts no liability in relation to any personal emails, or 
 >content of any email which does not directly relate to our 
 >business.
 >