<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hi Steve,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Old thread I know, but did you fix this in the end? I’m having this exact problem now and am thinking of changing the incoming folder to 0640 also.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Rich<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Steve Campbell<br><b>Sent:</b> 18 November 2011 18:56<br><b>To:</b> MailScanner discussion<br><b>Subject:</b> Re: Clamd permission error<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Maybe I see the problem.<br><br>Should the "incoming" folder itself be modded 640 instead of 600?<br><br>I'll change it since it shouldn't matter. <br><br>steve<br><br>On 11/18/2011 1:43 PM, Steve Campbell wrote: <o:p></o:p></p><p class=MsoNormal>I don't think anything that matters isn't 640 mod and clamav.clamav owned. The individual files created in the incoming directory are owned by clamav as well. An example:<br><br>incoming]# ls -al<br>total 2912<br>drwx------ 8 clamav clamav 4096 Nov 18 13:42 .<br>drwxr-xr-x 4 root root 4096 May 18 2004 ..<br>drwxr-x--- 2 clamav clamav 4096 Sep 9 07:02 26632<br>drwxr-x--- 4 clamav clamav 4096 Nov 18 13:41 5625<br>drwxr-x--- 4 clamav clamav 4096 Nov 18 13:41 5632<br>drwxr-x--- 7 clamav clamav 4096 Nov 18 13:41 5654<br>drwxr-x--- 2 root root 4096 Nov 18 11:14 Locks<br>-rw------- 1 root root 17408 Nov 18 13:41 Processing.db<br>-rw------- 1 root root 2722816 Nov 18 13:42 SpamAssassin.cache.db<br>drwx------ 2 root root 200704 Nov 18 13:41 SpamAssassin-Temp<br><br>Seems to me to be as it should be or those "Number" folders couldn't be created.<br><br>steve<br><br><br>On 11/18/2011 1:15 PM, Martin Hepworth wrote: <o:p></o:p></p><p class=MsoNormal>Steve<br>Double check nothing has altered any of the permissions further up the tree and the clamd user can access the files<br><br>Martin<br><br>On Friday, 18 November 2011, Steve Campbell <<a href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</a>> wrote:<br>> I'm pretty certain I looked through there. The settings are spread out all across the config file, so I might have missed one (or four). I just don't understand why I'm seeing this now (just one email) without having changed anything.<br>><br>> Thanks for all the help from everyone.<br>><br>> steve<br>><br>> On 11/18/2011 11:07 AM, Martin Hepworth wrote:<br>><br>> yes you need to look carefully at the mailscanner.conf settings for permssions etc. Theres good documentation in the file about running clamdd and the things you need to setup<br>> --<br>> Martin Hepworth<br>> Oxford, UK<br>><br>><br>> On 18 November 2011 14:53, Milenko Letic <<a href="mailto:mikoletic@gmail.com">mikoletic@gmail.com</a>> wrote:<br>>><br>>> this is mod in my MailScanner.conf :<br>>> Incoming Work Permissions = 0644<br>>> maybe , maybe not help, but wish you luck <br>>> On Fri, Nov 18, 2011 at 3:43 PM, Steve Campbell <<a href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</a>> wrote:<br>>>><br>>>> I'm getting the following error in my logs:<br>>>><br>>>> Clamd::ERROR:: lstat() failed: Permission denied. ERRORClamd::ERROR:: lstat() failed: Permission denied......<br>>>><br>>>> Looking back, I found a thread suggesting I should switch to the internal tnef expander, which I am trying now, and to ensure the "incoming" directory is accessible by the clam user (clamav). I've followed the suggestions in the MailScanner.conf file for the situation I am running under. The temp folders under the incoming directory, along with the incoming folder itself, where the winmail.dat is expanded IS owned by clamav.<br>>>><br>>>> So I'm wondering if the 0640 mod on the folders is the proper mod. Should there be any sticky bits or anything set?<br>>>><br>>>> Just curious, since this seems to be the first time I've run into this and I've been using MS for years.<br>>>><br>>>> steve campbell<br>>>><br>>>> --<br>>>> MailScanner mailing list<br>>>> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>>>> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>>>><br>>>> Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>>>><br>>>> Support MailScanner development - buy the book off the website!<br>>><br>>> --<br>>> MailScanner mailing list<br>>> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>>> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>>><br>>> Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>>><br>>> Support MailScanner development - buy the book off the website!<br>>><br>><br>><br>><br>><br><br>-- <br>-- <br>Martin Hepworth<br>Oxford, UK<br><br><br><o:p></o:p></p><p class=MsoNormal><br><br><o:p></o:p></p></div></body></html>