HTTP Anti-Virus Proxy

Command "/etc/init.d/havp start" writes in log file:
...
19/04/2006 12:16:32 === Starting HAVP Version: 0.79
19/04/2006 12:16:32 Change to user havp
19/04/2006 12:16:32 Change to group havp
19/04/2006 12:16:32 --- Initializing Clamd Socket Scanner
19/04/2006 12:16:32 ERROR: Clamd Socket Scanner failed EICAR virus test! (Access denied.)
...

In "helper.cpp" and in "scannerhandler.cpp" function call "fchmod()" for tempfile should set read permission for "other": "... | S_IROTH)...".

Have a nice day!

Hi there.. this is already documented, I think you missed that.

"If you choose to use clamd (which is not recommended as library support has less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, and add
clamav user to havp group."

If everyone could read the tempfile, it would mean everyone accessing the box could read what you are surfing.

Cheers,
Henrik

It's true . In fifteen minutes I came to the same conclusion, but I was already far away from my computer to correct myself.



Thank you, Henrik, for the tip! I have immediately found your quotation in "Documentation and FAQs" -> "Scanners" and in the INSTALL file in the installation package. I should be more attentive.