[exim] Strange error from ClamAV (solved)

We eventually ran this one down. The line



AllowSupplementaryGroups



Was missing from clamd.conf on the affected machine. (Quite how, since
that files is automatically generated, and the line was preserved when
the other two machines were updated, remains a mystery). But putting the
line back in cleared the problem.









________________________________

From: Stanier, Alan M
Sent: 04 October 2005 11:42
To: 'exim-users@???'
Subject: Strange error from ClamAV



We run identical installations of exim 4.53 on three SMTP servers.
Recently, one has started rejecting all email, with the log showing
messages like



malware acl condition: clamd: ClamAV returned
/var/spool/exim_incoming/scan/1EMk73-0001ij-Ac: Access denied. ERROR



This looked like a permissions problem, but the protections on the
/var/spool hierarchy are identical on the failing machine and the two
working ones. As a test, I chmod'ed 777 all the way up the hierarchy,
but the problem persisted.



I am baffled ... can anyone suggest what might be wrong?



Thanks



Alan Stanier

Essex University