[Pkg-clamav-devel] Possible (grave) bug in clamav-daemon

[Florian Pelgrim]

> You don't by chance have apparmor or SE Linux enabled do you?
As long as this is not enabled on default in stretch not.

> 
> Scott K
> 
> On Thursday, February 07, 2019 04:27:12 AM Florian Pelgrim wrote:
>> Hello maintainers,
>>
>> I'm running debian stretch with clamav-daemon and amavisd-new.
>>
>> After installing the package clamav-daemon and configuring amavisd-new
>> to use the av scanner  it leads into an unusable mail setup.
>>
>>   From /var/log/clamav/clamav.log
>> WARNING: lstat() failed on: /var/lib/amavis/tmp/afXXXXqi4S6v/parts
>>
>> The permissions on the folder are looking good to me
>> $ ls -al /var/lib/amavis/tmp/
>> total 20
>> drwxrwx--- 5 amavis amavis  4096 Feb  7 04:16 .
>> drwxr-x--- 6 amavis amavis  4096 Feb  7 03:39 ..
>> drwxr-x--- 3 amavis postfix 4096 Feb  7 04:16 afXXXXj0mr9n
>> drwxr-x--- 3 amavis postfix 4096 Feb  7 04:16 afXXXXSJQLBy
>> drwxr-x--- 2 amavis postfix 4096 Feb  7 04:16 afXXXXwzIeVe
>>
>> I tried now several things to fix it but end up with no solution. So
>> before I open a bug report I was hoping you would point me to something
>> stupid I have done or forgotten. :)
>>
>> 1. I added clamav to the group amavis and amavis to the group clamav
>>
>> $ groups amavis
>> amavis : amavis mail clamav
>> $ groups clamav
>> clamav : clamav amavis
>>
>> 2. I hot patched the systemd service script to run clamav with the group
>> amavis
>> [...]
>> Group=amavis
>> User=clamav
>> [...]
>>
>> 3 I know that `AllowSupplementaryGroups` is deprecated and will not help
>> anymore. I tried it anyway but yeah. No success.
>>
>> The system is fresh setup debian stretch with no outstanding updates.
>> Anyone of you an idea what I'm missing or do I really have to open a bug
>> report? ;)
>>
>> Cheers
>> Flo
>>
>> _______________________________________________
>> Pkg-clamav-devel mailing list
>> Pkg-clamav-devel at alioth-lists.debian.net
>> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel
>