Dumaru again

[Spicer, Kevin]

Stephan Ilaender wrote:
> am 26.03.2004 schrieb Spicer, Kevin zum Thema
> just a quick clarification here:
> 
> --no-archive
>               Disable archive support built in libclamav.
> 
> this means internal support for zip is disabled - an archive will
> still be unpacked and scanned using the command line tools provided
> by the OS. As an example:

Right, but if the external unpacker doesn't work, you aren't going to spot it.  There is a good reason why the external unpacker might fail...

When running as root clamav drops privileges to another user (usually user clamav, group clamav).  Because MailScanner runs as root (with sendmail anyway) this can prevent external unpackers from working (as it tends to use /root/tmp for temp files).  Julian kindly included my adapted clamav-wrapper in recent releases which addresses this issue.  To make sure everything will work make sure you have the most recent wrapper script and follow the instructions in the comments in it (you need to change a couple of settings in MailScanner.conf).

Kevin



BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.