[Mimedefang] MD 2.43 - Missing Viruses

[David F. Skoll]

On Mon, 31 May 2004, Chris Myers wrote:

> 1) The default umask for my system is 077, which means that many of the
> files created by MIMEDefang are not readable by the virus scanner unless
> it's running as root (on my system, I have clamav running as a member of the
> defang group).  MIMEDefang apparently doesn't override the default netmask,
> and doesn't hard-set the permissions on most files it creates.

Clam should run as "defang" if you use it with MIMEDefang.

> 2) At least with clamd, MIMEDefang instructs ClamAV to scan
> "mdefang-XXXXXX/Work", so ClamAV is only getting a shot at the decoded MIME
> parts.

See md_copy_orig_msg_to_work_dir_as_mbox_file in the mimedefang-filter
man page (recent versions of MIMEDefang only -- introduced in 2.42)

--
David.