<div dir="ltr">Let me rewrite that to look like yours....<div><br></div><div>echo "d /var/run/clamd.scan 0750 clamscan mtagroup -" > /usr/lib/tmpfiles.d/clamd.conf<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 9, 2017 at 3:06 PM, Shawn Iverson <span dir="ltr"><<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Checking my notes...<div><br></div><div>I have this, but I'm haven't gotten very deep into CentOS7 clam yet.</div><div><br></div><div>echo "d /var/run/clamd.scan 0750 clamupdate matgroup -" > /usr/lib/tmpfiles.d/clamd.conf<br></div><div><br></div><div>It is weird looking to me, but it is in my notes.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 9, 2017 at 3:01 PM, Tracy Greggs <span dir="ltr"><<a href="mailto:mailscanner-list@okla.com" target="_blank">mailscanner-list@okla.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">So what can be done about clamd@scan service creating /var/run/clamd.scan folder as follows:<br>
<br>
drwx--x--- 2 clamscan mtagroup 80 Oct 7 16:07 clamd.scan<br>
<br>
The group permissions is creates the folder with are clearly a problem.<br>
<br>
Thanks :)<br>
<br>
Tracy<br>
<br>
<br>
-----Original Message-----<br>
From: MailScanner [mailto:<a href="mailto:mailscanner-bounces%2Bmailscanner-list" target="_blank">mailscanner-bounces+ma<wbr>ilscanner-list</a>=<a href="mailto:okla.com@lists.mailscanner.info" target="_blank">okla.com@lists.<wbr>mailscanner.info</a>] On Behalf Of Mark Sapiro<br>
Sent: Saturday, October 7, 2017 1:59 PM<br>
To: <a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br>
Subject: Re: Centos 7 + Postfix + clamd@scan<br>
<br>
On 10/07/2017 11:40 AM, Shawn Iverson wrote:<br>
> Is clamscan a member of the mtagroup group?<br>
<br>
<br>
I don't think that's exactly the issue.<br>
<br>
<br>
> On Sat, Oct 7, 2017 at 2:37 PM, Tracy Greggs <<a href="mailto:mailscanner-list@okla.com" target="_blank">mailscanner-list@okla.com</a>> wrote:<br>
><br>
...<br>
><br>
> [root@test ~]# ls -la /var/run/clamd.scan/<br>
> total 4<br>
> drwx--x--- 2 clamscan clamscan 80 Oct 7 13:25 .<br>
> drwxr-xr-x 41 root root 1260 Oct 7 13:26 ..<br>
> -rw-rw-r-- 1 clamscan clamscan 6 Oct 7 13:25 clamd.pid<br>
> srw-rw-rw- 1 clamscan clamscan 0 Oct 7 13:25 clamd.sock<br>
<br>
<br>
The issue here is only the clamscan user or group can access clamd.pid and clamd.sock and the group and MailScanner is not running as that user or group.<br>
<br>
<br>
> [root@test ~]# cat /etc/group | grep clam<br>
> clamupdate:x:984:<br>
> virusgroup:x:983:clamupdate,c<wbr>lamscan,postfix<br>
> mtagroup:x:1002:postfix,mail,<wbr>clamscan<br>
> clamscan:x:982:<br>
<br>
<br>
What you want is the user/group of /var/run/clamd.scan to be mtagroup, not clamscan. What you need is<br>
<br>
LocalSocketGroup mtagroup<br>
<br>
in /etc/clamav/clamd.conf<br>
<br>
--<br>
Mark Sapiro <<a href="mailto:mark@msapiro.net" target="_blank">mark@msapiro.net</a>> The highway is for gamblers,<br>
San Francisco Bay Area, California better use your sense - B. Dylan<br>
<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>mailman/listinfo/mailscanner</a><br>
<br>
<br>
--<br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
<br>
<br>
---<br>
This email has been checked for viruses by Avast antivirus software.<br>
<a href="https://www.avast.com/antivirus" rel="noreferrer" target="_blank">https://www.avast.com/antiviru<wbr>s</a><br>
<span class="m_-530040093215485158HOEnZb"><font color="#888888"><br>
<br>
--<br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
<br><span class="HOEnZb"><font color="#888888">
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>mailman/listinfo/mailscanner</a><br>
<br>
</font></span></font></span></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="m_-530040093215485158gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson, CETL<div>Director of Technology</div><div>Rush County Schools</div><div><a href="tel:(765)%20932-3901" value="+17659323901" target="_blank">765-932-3901 x271</a></div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ"><br></div></div></div></div></div></div></div></div></div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson, CETL<div>Director of Technology</div><div>Rush County Schools</div><div>765-932-3901 x271</div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ"><br></div></div></div></div></div></div></div></div></div></div></div>
</div>