lstat() failed on: /var/spool/MailScanner/incoming/

[Chris Gibson]

First of all I know there have been lots of threads on this, I think I've
seen them all and that's why I'm sending to the list, maybe someone out
there can help...

Running Centos 6.3 and MailScanner 4.84.5
in MailScanner.conf I have the following set up:

Run As Group = clamav
Incoming Work Group = clamav
Incoming Work Permissions = 0770  (I've tried 777 as well)

ClamAV is running as root
the permissions on the incoming dir look like this:
MailScanner]# ls -alF /var/spool/MailScanner/
total 20
drwxrwxr-x.  5 root    root   4096 Mar  6  2012 ./
drwxrwxr-x. 16 root    root   4096 Mar  6  2012 ../
drwxrwx---.  9 postfix clamav 4096 Nov 27 15:23 incoming/
drwxrwx---.  3 postfix clamav 4096 Nov 25 21:43 quarantine/
drwxrwx---.  2 postfix clamav 4096 Mar  7  2012 spamassassin/

The dirs that clamav is complaining about look like this:

MailScanner]# ls -alF /var/spool/MailScanner/incoming/
total 348
drwxrwx---. 9 postfix clamav   4096 Nov 27 15:23 ./
drwxrwxr-x. 5 root    root     4096 Mar  6  2012 ../
drwxrwx---. 2 postfix clamav   4096 Nov 27 15:11 4374/
drwxrwx---. 2 postfix clamav   4096 Nov 27 15:11 4378/
drwxrwx---. 2 postfix clamav   4096 Nov 27 15:11 4379/
drwxrwx---. 2 postfix clamav   4096 Nov 27 15:12 4393/
drwxrwx---. 2 postfix clamav   4096 Nov 27 15:11 4397/

Clearly root should be able to do whatever he wishes with these files but
the error persists, even if the clamd user is set to clamd?

This is happening on every email that is being sent but the emails do make
it to their destination.

Here is the output of MailScanner --lint:
MailScanner --lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 869 hostnames from the phishing whitelist
Read 4832 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (4.84.5) is correct.

Unrar is not installed, it should be in /usr/bin/unrar.
This is required for RAR archives to be read to check
filenames and filetypes. Virus scanning is not affected.


ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf
ERROR: is not correct, it should match X-data4-MailScanner-From

MailScanner setting GID to  (488)  **clamd
MailScanner setting UID to  (89)  **postfix

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd"
Found these virus scanners installed: clamd
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied.
ERROR :: /var/spool/MailScanner/incoming/4911
Virus Scanning: Clamd found 1 infections
Virus Scanning: Found 1 viruses
===========================================================================

If any of your virus scanners (clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.

Sorry for the length of this, hope someone out there can help!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20121127/d1947a27/attachment.html