HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

0.79: clamd scanner interaction problem
http://havp.hege.li/forum/viewtopic.php?f=3&t=75		 Page 1 of 1
Author:  Nigo [ 19 Apr 2006 15:48 ]
Post subject:  0.79: clamd scanner interaction problem
Command "/etc/init.d/havp start" writes in log file:
...
19/04/2006 12:16:32 === Starting HAVP Version: 0.79
19/04/2006 12:16:32 Change to user havp
19/04/2006 12:16:32 Change to group havp
19/04/2006 12:16:32 --- Initializing Clamd Socket Scanner
19/04/2006 12:16:32 ERROR: Clamd Socket Scanner failed EICAR virus test! (Access denied.)
...

In "helper.cpp" and in "scannerhandler.cpp" function call "fchmod()" for tempfile should set read permission for "other": "... | S_IROTH)...".

Have a nice day! :)
Author:  hege [ 19 Apr 2006 17:17 ]
Post subject:  Re: 0.79: clamd scanner interaction problem
Nigo wrote:
In "helper.cpp" and in "scannerhandler.cpp" function call "fchmod()" for tempfile should set read permission for "other": "... | S_IROTH)...".


Hi there.. this is already documented, I think you missed that.

"If you choose to use clamd (which is not recommended as library support has less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, and add
clamav user to havp group."

If everyone could read the tempfile, it would mean everyone accessing the box could read what you are surfing. ;)

Cheers,
Henrik
Author:  Guest [ 20 Apr 2006 10:42 ]
Post subject:  Re: 0.79: clamd scanner interaction problem
Quote:
...If everyone could read the tempfile, it would mean everyone accessing the box could read what you are surfing. ;)...


It's true :( . In fifteen minutes I came to the same conclusion, but I was already far away from my computer to correct myself.

Quote:
...this is already documented, I think you missed that.

"If you choose to use clamd (which is not recommended as library support has less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, and add
clamav user to havp group."

Cheers,
Henrik


Thank you, Henrik, for the tip! I have immediately found your quotation in "Documentation and FAQs" -> "Scanners" and in the INSTALL file in the installation package. I should be more attentive. :lol:
Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/