From owner-freebsd-ports@FreeBSD.ORG Wed Mar 17 11:46:25 2004 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC58816A4CE for ; Wed, 17 Mar 2004 11:46:25 -0800 (PST) Received: from notes.hallinto.turkuamk.fi (notes.hallinto.turkuamk.fi [195.148.215.149]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0969143D3F for ; Wed, 17 Mar 2004 11:46:25 -0800 (PST) (envelope-from yurtesen@ispro.net.tr) Received: from ispro.net.tr ([195.148.208.31]) by notes.hallinto.turkuamk.fi (Lotus Domino Release 5.0.10) with ESMTP id 2004031721474997:79775 ; Wed, 17 Mar 2004 21:47:49 +0200 Message-ID: <4058AB15.7060105@ispro.net.tr> Date: Wed, 17 Mar 2004 21:46:29 +0200 From: Evren Yurtesen User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5b) Gecko/20030808 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Oliver Eikemeier References: <40583453.7000405@ispro.net.tr> <4058361B.4010909@fillmore-labs.com> <20040317114059.GA27663@chihiro.leafy.idv.tw> <405841A0.9030802@ispro.net.tr> <40584897.4030300@fillmore-labs.com> <4058501B.5020405@ispro.net.tr> <40589869.4020104@fillmore-labs.com> In-Reply-To: <40589869.4020104@fillmore-labs.com> X-MIMETrack: Itemize by SMTP Server on notes.hallinto.turkuamk.fi/TAMK(Release 5.0.10 |March 22, 2002) at 17.03.2004 21:47:50,|March 22, 2002) at 17.03.2004 21:47:52, Serialize complete at 17.03.2004 21:47:52 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii; format=flowed cc: ports@freebsd.org cc: leafy Subject: Re: clamav port... X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Mar 2004 19:46:26 -0000 Oliver Eikemeier wrote: > Evren Yurtesen wrote: > >> Oliver Eikemeier wrote: >> >>> I solved this problem with exim by adding clamav to a group that is able >>> to read the mail files (mail in this case), but not write them, which is >>> IMHO a better solution that using the same user. Is this possible for >>> vscan >>> and qscand too? >>> >>> [...] >> >> >> I tried that already, >> >> # Initialize the supplementary group access (for all groups in /etc/group >> # user is added in. clamd must be started by root). >> AllowSupplementaryGroups >> >> But it didnt work, I dont know why... > > > Which is the primary group of qscand? is clamav a member of this group? > > -Oliver I tried qscand:*:98:clamav and it didnt make any change...maybe the files that qscand is writing to temp has only user read permissions...