[Mimedefang] Clamd permissions on Centos with mimedefang

[Philip Prindeville]

No, the default for clamd is to have:

# Sets the permissions on the unix socket to the specified mode.
# Default: disabled (socket is world accessible)
#LocalSocketMode 660

(i.e. 666).

The problem is here:

Jan 13 15:45:55 glue01 mimedefang.pl[23502]: E827922134F: lstat(/var/spool/MIMEDefang/mdefang-GlbJT07/Work/msg-23502-3.txt) errno 0 => 100600, defang.defang
Jan 13 15:45:55 glue01 mimedefang.pl[23502]: E827922134F: lstat(/var/spool/MIMEDefang/mdefang-GlbJT07/Work) errno 0 => 40700, defang.defang
Jan 13 15:45:55 glue01 mimedefang.pl[23502]: E827922134F: lstat(/var/spool/MIMEDefang/mdefang-GlbJT07) errno 0 => 40700, defang.defang

mimedefang isn't creating the work-items as group readable/searchable in /var/spool/MIMEDefang/ ...

-Philip


On 1/13/12 3:40 PM, Paul Murphy wrote:
> Philip,
> 
> I think it is the other way round - your MD process is running as
> "defang", which has no permissions on the clamav socket.
> 
> Paul.