[Pkg-clamav-devel] Bug#597048: README.Debian suggest to put SOCKET= in /etc/default/clamav-milter but it's not used

hertzog at debian.org hertzog at debian.org
Thu Sep 16 07:02:05 UTC 2010


Package: clamav-milter
Version: 0.96.1+dfsg-1
Severity: normal

The README.Debian says:
   POSTFIX

   Recent versions of postfix have support for milters.  This allows clamav-milter to
   be used reasonably well with postfix, although the problem of group permissions on
   the actual socket is a problem.  See /usr/share/doc/clamav-milter/INSTALL.gz for some
   details.  A solution for the frequent "I have to change the init script to make sure
   postfix can communicate with the socket" problem is making the directory for the socket
   setgid.  So:
   uncomment "USE_POSTFIX=yes" in /etc/default/clamav-milter and choose the appropriate
   socket option.
   mkdir -p /var/spool/postfix/clamav/
   chown clamav:postfix /var/spool/postfix/clamav/
   chmod g+s /var/spool/postfix/clamav/
   ls -l /var/spool/postfix/clamav/
   srwxrwxr-x 1 clamav postfix 0 2006-12-15 03:37 clamav-milter

   Another option is to use a TCP socket for milter <-> postfix communication.  For this
   option, you can use the syntax:
   SOCKET=inet:12000 at 127.0.0.1 (port at host, in case it's not clear)
   in /etc/default/clamav-milter.  This has the disadvantage that you lose filesystem
   permission-based protections on the socket, so use with some caution.


All of this is wrong... USE_POSTFIX is without effect and SOCKET is the same.
The configuration is all dealt with clamav-milter.conf which is itself generated
with debconf.

Please review that file and update it to match the current situation. Wrong
documentation is very misleading for end-users, in particular when
README.Debian is the one that should always be right because the package
maintainers know what he did. :-)
  
Cheers,





More information about the Pkg-clamav-devel mailing list