RE: [Exim] Problem with exiscan/exim 4.22/fsav 4.5

Startseite
Nachricht löschen
Nachricht beantworten
Autor: McNay, Gavin
Datum:  
To: 'Andrew Lewis', exim-users
Betreff: RE: [Exim] Problem with exiscan/exim 4.22/fsav 4.5
Andrew,

what is the permission of the file /opt/f-secure/fsav/bin/fsav

which user does exim run as ? (you could get this by writing it out in your
wrapper i guess by doing "env > /tmp/wrapper.out"

Gavin

-----Original Message-----
From: Andrew Lewis [mailto:al@xm.co.za]
Sent: 29 August 2003 11:03
To: exim-users@???
Subject: [Exim] Problem with exiscan/exim 4.22/fsav 4.5


Well.. not necessarily with fsav, although I would be interested to find
out. What I've added to my configuration is:

av_scanner = cmdline:\
             /opt/f-secure/fsav/bin/fsav --usedaemon %s:\
             Infected|Suspicious:\
             Infected|Suspicious::(.*)


and the following ACL

check_message:
deny message = Detected malware: $malware_name
demime = *
malware = *
accept

Ok, which should be fine enough? However, it doesn't seem that the scanner
is being run?.. Nothing in the logs to indicate as much at least..

I've tried running it with a wrapper and have confirmed that the wrapper
gets executed. Interestingly, wether or not I have the actual fsav command
included in this wrapper, the kernel logs the following:

Aug 29 11:59:27 askariupgd kernel: application bug: exim(12099) has
SIGCHLD set
to SIG_IGN but calls wait().
Aug 29 11:59:27 askariupgd kernel: (see the NOTES section of 'man 2
wait'). Workaround activated.

What is happening?

Best Regards,
AL.


--

## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
details at http://www.exim.org/ ##


PLEASE READ: The information contained in this email is confidential
and intended for the named recipient(s) only. If you are not an intended
recipient of this email you must not copy, distribute or take any
further action in reliance on it and you should delete it and notify the
sender immediately. Email is not a secure method of communication and
Nomura International plc cannot accept responsibility for the accuracy
or completeness of this message or any attachment(s). Please examine this
email for virus infection, for which Nomura International plc accepts
no responsibility. If verification of this email is sought then please
request a hard copy. Unless otherwise stated any views or opinions
presented are solely those of the author and do not represent those of
Nomura International plc. This email is intended for informational
purposes only and is not a solicitation or offer to buy or sell
securities or related financial instruments. Nomura International plc is
regulated by the Financial Services Authority and is a member of the
London Stock Exchange.