Centos 7 + Postfix + clamd at scan

[Tracy Greggs]

When the VM is rebooted, it re-creates /var/run/clamd.scan/



drwx--x---   2 clamscan       clamscan         80 Oct  9 14:34 clamd.scan







From: MailScanner [mailto:mailscanner-bounces+mailscanner-list=okla.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Monday, October 9, 2017 2:13 PM
To: MailScanner Discussion
Subject: Re: Centos 7 + Postfix + clamd at scan



Wait, that's a directory, my bad.  socket would be inside.



On Mon, Oct 9, 2017 at 3:11 PM, Shawn Iverson <iversons at rushville.k12.in.us> wrote:

There is no rw on the socket for the mtagroup.



On Mon, Oct 9, 2017 at 3:10 PM, Mark Sapiro <mark at msapiro.net> wrote:

On 10/09/2017 12:01 PM, Tracy Greggs wrote:
> So what can be done about clamd at scan service creating /var/run/clamd.scan folder as follows:
>
> drwx--x---   2 clamscan       mtagroup         80 Oct  7 16:07 clamd.scan
>
> The group permissions is creates the folder with are clearly a problem.


Why is this a problem?

If MailScanner is running as a member of the mtagroup group, it can
search that directory for the /var/run/clamd.scan/clamd.sock socket and
as long as it has rw permission on the socket, there should be no problem.

--
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner







--

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x271 <tel:(765)%20932-3901>

iversons at rushville.k12.in.us



  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ>







--

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x271

iversons at rushville.k12.in.us



  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ>


--
This message has been scanned for viruses and
dangerous content by  <http://www.mailscanner.info/> MailScanner, and is
believed to be clean.



---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20171009/fcd13c48/attachment.html>