[Pkg-clamav-devel] Possible (grave) bug in clamav-daemon

[Scott Kitterman]

You don't by chance have apparmor or SE Linux enabled do you?

Scott K

On Thursday, February 07, 2019 04:27:12 AM Florian Pelgrim wrote:
> Hello maintainers,
> 
> I'm running debian stretch with clamav-daemon and amavisd-new.
> 
> After installing the package clamav-daemon and configuring amavisd-new
> to use the av scanner  it leads into an unusable mail setup.
> 
>  From /var/log/clamav/clamav.log
> WARNING: lstat() failed on: /var/lib/amavis/tmp/afXXXXqi4S6v/parts
> 
> The permissions on the folder are looking good to me
> $ ls -al /var/lib/amavis/tmp/
> total 20
> drwxrwx--- 5 amavis amavis  4096 Feb  7 04:16 .
> drwxr-x--- 6 amavis amavis  4096 Feb  7 03:39 ..
> drwxr-x--- 3 amavis postfix 4096 Feb  7 04:16 afXXXXj0mr9n
> drwxr-x--- 3 amavis postfix 4096 Feb  7 04:16 afXXXXSJQLBy
> drwxr-x--- 2 amavis postfix 4096 Feb  7 04:16 afXXXXwzIeVe
> 
> I tried now several things to fix it but end up with no solution. So
> before I open a bug report I was hoping you would point me to something
> stupid I have done or forgotten. :)
> 
> 1. I added clamav to the group amavis and amavis to the group clamav
> 
> $ groups amavis
> amavis : amavis mail clamav
> $ groups clamav
> clamav : clamav amavis
> 
> 2. I hot patched the systemd service script to run clamav with the group
> amavis
> [...]
> Group=amavis
> User=clamav
> [...]
> 
> 3 I know that `AllowSupplementaryGroups` is deprecated and will not help
> anymore. I tried it anyway but yeah. No success.
> 
> The system is fresh setup debian stretch with no outstanding updates.
> Anyone of you an idea what I'm missing or do I really have to open a bug
> report? ;)
> 
> Cheers
> Flo
> 
> _______________________________________________
> Pkg-clamav-devel mailing list
> Pkg-clamav-devel at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel