clamd permission denied

[terry at graybell.net]

If you have AppArmor installed you need to make a change to the AppArmor
configuration:

Edit the AppArmor profile

/etc/apparmor.d/usr.sbin.clamd

Add these 2 lines:

  /var/spool/MailScanner/** rw,
  /var/spool/MailScanner/incoming/** rw,

Then, reload AppArmor

/etc/init.d/apparmor reload

Check your log files for the return of the error.  This error is widely
known and has been documented well.  If you still have issues then please
reply.

Terry

On Mon, 13 Feb 2012 08:42:47 +1100, Jeff Mills
<Jeff.Mills at sydneytech.com.au> wrote:
> I have two servers and one of them has started having issues with
> permissions in the incoming dir.
> 
> MailScanner[16804]: Clamd::ERROR:: UNKNOWN CLAMD RETURN ./
> 74E6C1C2E344.A404C.header/Access denied. ERROR ::
> /var/spool/MailScanner/incoming/16804
> 
> When I check that directory, I can see that MailScanner has given no
> access to the group on the header file, so obviously clamav can’t read
it.
> drwxr-x--- 2 postfix clamav     80 Feb 13 08:33 74E6C1C2E344.A404C
> -rw------- 1 postfix clamav   1326 Feb 13 08:33
74E6C1C2E344.A404C.header
> -rw-rw-r-- 1 postfix clamav  13678 Feb 13 08:33
74E6C1C2E344.A404C.message
> 
> My mailscanner group is clamav and user is postfix.
> Permissions are set to 0640.
> 
> On the machine that works fine, the permissions look like this:
> 
> drwxr-x--- 2 postfix clamav   60 Feb 13 08:34 F3913D3E8F4.A4D35
> -rw-r----- 1 postfix clamav 1414 Feb 13 08:34 F3913D3E8F4.A4D35.header
> -rw-rw-r-- 1 postfix clamav 2245 Feb 13 08:34 F3913D3E8F4.A4D35.message
> 
> 
> Can anyone offer some help on this? I don’t understand why this is only
> happening on one server. The configs are the same.
> 
> 
> 
> Jeff Mills
> 
> p:      +61 2 8212 4722
> e:     
Jeff.Mills at sydneytech.com.au<mailto:Jeff.Mills at sydneytech.com.au>
> 
> 
> 
> [cid:fb3fbe.png at 24c107ed.4e8633ef]<http://www.sydneytech.com.au>
> 
> 
> 
> [cid:3bcbb1.png at 634751a7.4183fe20]<http://www.facebook.com/sydneytech>
> [cid:8ff87d.png at 905ba500.4a8b78f8] <http://twitter.com/#!/sydneytech> 
> [cid:a705d3.png at d3652ae7.4eaa700d]
>
<http://www.linkedin.com/company/sydney-technology-solutions?trk=fc_badge> 
> [cid:c5b7dd.png at 3d8fcaa8.41a28de7] <http://www.sydneytech.com.au/feed>
> 
> 
> 
> 
> Sydney Technology Solutions
> p:      +61 2 8212 4722
> f:      +61 2 9708 4977
> w:      www.sydneytech.com.au<http://www.sydneytech.com.au>
> 
> Unit F10, 101 Rookwood Road
> Yagoona NSW 2199
> 
> 
> 
> 
> Living our values, achieving success
> Sydney Technology Solutions’ operating philosophy is based on honesty,
> enthusiasm, respect, ownership, excellence and service. These values
guide
> the way we manage our business and the way we service yours.
> 
> 
> 
>  [cid:image3e86c5.GIF at 37c9acc9.4ea8dec0]
> 
>  Please consider the environment before printing this email message.
> 
> 
> Disclaimer:
> This message contains confidential information and is intended only for
> the original recipient. If you are not the original recipient, you
should
> not disseminate, distribute or copy this e-mail. Please notify Sydney
> Technology Solutions immediately by e-mail if you have received this
e-mail
> by mistake and delete this e-mail from your system. E-mail transmission
> cannot be guaranteed to be secure or error-free as information could be
> intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
> contain viruses. Sydney Technology Solutions therefore does not accept
> liability for any errors or omissions in the contents of this message,
> which arise as a result of e-mail transmission. If verification is
required
> please request a hard-copy version.