Bug#310633: exim4-daemon-heavy: av_scanner permission error with clamav

tom morgan tom morgan <tom.morgan@densem.edu>, 310633@bugs.debian.org
Tue, 24 May 2005 15:18:05 -0600


Package: exim4-daemon-heavy
Version: 4.50-4
Severity: important

i apologize if this is tied to the wrong package.  it's hard to tell if 
it is an exim4 bug or a clamav bug.  based on the solution given below, 
i selected this one.

after enabling the av_scanner directive in exim4, using clamav, we
started receiving the following error:

2005-05-24 06:25:20 1DaYTI-0007JY-Ku malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1DaYTI-0007JY-Ku: Access denied. ERROR

the above error results in _all_ mail being temporarily rejected.

the solution is to add the user  clamav  to the group  Debian-exim .  as 
such, i am suggesting that clamav be added to group Debian-exim as part 
of the exim4 install/configuration.




-- Package-specific info:
Exim version 4.50 #1 built 02-Mar-2005 07:42:40
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
Support for: iconv() IPv6 PAM Perl GnuTLS Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
Authenticators: cram_md5 cyrus_sasl plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Configuration file is /etc/exim4/exim4.conf

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages exim4-daemon-heavy depends on:
ii  exim4-base                  4.50-4       support files for all exim MTA (v4
ii  libc6                       2.3.2.ds1-21 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-18    Berkeley v4.2 Database Libraries [
ii  libgnutls11                 1.0.16-9     GNU TLS library - runtime library
ii  libldap2                    2.1.30-8     OpenLDAP libraries
ii  libmysqlclient10            3.23.56-3    LGPL-licensed client library for M
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libpcre3                    4.5-1.1      Perl 5 Compatible Regular Expressi
ii  libperl5.8                  5.8.4-8      Shared Perl library
ii  libpq3                      7.4.7-6      PostgreSQL C client library
ii  libsasl2                    2.1.19-1.5   Authentication abstraction library

-- no debconf information