Re: [exim] ClamAV scan permissions?

Top Page
Delete this message
Reply to this message
Author: Marc Perkel
Date:  
To: Exim User's Mailing List
Subject: Re: [exim] ClamAV scan permissions?


David S. Madole wrote:

> From: "Nigel Metheringham" <Nigel.Metheringham@???>
>
>> On Tue, 2005-01-11 at 07:40 -0800, Marc Perkel wrote:
>>
>>> I have ClamAV in the Mail group so it it should have rights to the scan
>>> directory itself - and it does. But - it seems that it does not have
>>> access to the directories that Exim creates within the scan directory.
>>
>>
>> Have you set AllowSupplementaryGroups in clamd.conf?
>
>
> I can't see that it really matters, because exim (exiscan really)
> creates the mbox directories as 0750 and clamd needs to write into the
> directory to de-MIME the mbox file into separate files for each MIME
> part. No matter what group clamd is a member of, it still won't be
> able to write into a 0750 directory, right?
>
> David
>

That's the way I see it. Seems like 770 is a better default for permissions.