ClamAv 0.96 is out

[Iulian L Dragomir]

On Sat, Apr 3, 2010 at 3:18 AM, Mark Sapiro <mark at msapiro.net> wrote:
> On 4/2/2010 5:07 PM, Mark Sapiro wrote:
>>
>> Those 22xxx folders are named for the PIDs of the process that creates
>> them. Each new MailScanner --lint is a new PID which tries to create a
>> new directory, but it can't because the group doesn't have write
>> permission on the directory.
>
>
> Upon rereading, I see the above is perhaps ambiguous. I meant to say
>
> Each new MailScanner --lint is a new PID which tries to create a
> new incoming/ppppp directory, but it can't because the group doesn't
> have write permission on the incoming/ directory.
>
> But now I'm not sure if that's a correct explanation since MailScanner
> should have permission and clamd's pid should be fixed, but still I
> think the incoming/ directory should be g+w.
>

I changed the permission of the incoming dir. Now it can be written by
the group members. I still have in MailScanner.conf the settings
"Incoming Work Group = clamav" and  "Incoming Work Permissions = 0660"

name                        perms            owner  group
=============================
incoming                   drwxrwxr-x     root     clamav

MailScanner --lint continue to produce the undesirable result:

MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamd
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::ERROR:: UNKNOWN CLAMD RETURN ./MSlint8Gqn77/lstat() failed:
Permission denied. ERROR :: /var/spool/MailScanner/incoming/13434
Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================

Any other sugestions ?