Bug#310633: exim4-daemon-heavy: av_scanner permission error with clamav
tom morgan
tom morgan <tom.morgan@densem.edu>, 310633@bugs.debian.org
Tue, 24 May 2005 15:18:05 -0600
Package: exim4-daemon-heavy
Version: 4.50-4
Severity: important
i apologize if this is tied to the wrong package. it's hard to tell if
it is an exim4 bug or a clamav bug. based on the solution given below,
i selected this one.
after enabling the av_scanner directive in exim4, using clamav, we
started receiving the following error:
2005-05-24 06:25:20 1DaYTI-0007JY-Ku malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1DaYTI-0007JY-Ku: Access denied. ERROR
the above error results in _all_ mail being temporarily rejected.
the solution is to add the user clamav to the group Debian-exim . as
such, i am suggesting that clamav be added to group Debian-exim as part
of the exim4 install/configuration.
-- Package-specific info:
Exim version 4.50 #1 built 02-Mar-2005 07:42:40
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003)
Support for: iconv() IPv6 PAM Perl GnuTLS Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
Authenticators: cram_md5 cyrus_sasl plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Configuration file is /etc/exim4/exim4.conf
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages exim4-daemon-heavy depends on:
ii exim4-base 4.50-4 support files for all exim MTA (v4
ii libc6 2.3.2.ds1-21 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [
ii libgnutls11 1.0.16-9 GNU TLS library - runtime library
ii libldap2 2.1.30-8 OpenLDAP libraries
ii libmysqlclient10 3.23.56-3 LGPL-licensed client library for M
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libpcre3 4.5-1.1 Perl 5 Compatible Regular Expressi
ii libperl5.8 5.8.4-8 Shared Perl library
ii libpq3 7.4.7-6 PostgreSQL C client library
ii libsasl2 2.1.19-1.5 Authentication abstraction library
-- no debconf information