Author: Marc Perkel Date: To: Exim User's Mailing List Subject: Re: [exim] ClamAV scan permissions?
David S. Madole wrote:
> From: "Nigel Metheringham" <Nigel.Metheringham@???>
>
>> On Tue, 2005-01-11 at 07:40 -0800, Marc Perkel wrote:
>>
>>> I have ClamAV in the Mail group so it it should have rights to the scan
>>> directory itself - and it does. But - it seems that it does not have
>>> access to the directories that Exim creates within the scan directory.
>>
>>
>> Have you set AllowSupplementaryGroups in clamd.conf?
>
>
> I can't see that it really matters, because exim (exiscan really)
> creates the mbox directories as 0750 and clamd needs to write into the
> directory to de-MIME the mbox file into separate files for each MIME
> part. No matter what group clamd is a member of, it still won't be
> able to write into a 0750 directory, right?
>
> David
> That's the way I see it. Seems like 770 is a better default for permissions.