Andryan's Random Notes » ClamAV http://blog.nirkabel.org This blog is here to stay Fri, 20 Jan 2012 03:17:09 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 ClamAV’s clamd/freshclam permission problems http://blog.nirkabel.org/2007/06/24/clamavs-clamdfreshclam-permission-problems/ http://blog.nirkabel.org/2007/06/24/clamavs-clamdfreshclam-permission-problems/#comments Sun, 24 Jun 2007 09:12:17 +0000 Andryan http://andryan.wordpress.com/2007/06/24/clamavs-clamdfreshclam-permission-problems/ Since I have always used ClamAV‘s clamd as the virus filter of my email servers along with qmail-scanner, I noticed that crash-hat‘s clamav RPM packages use logrotate to rotate the logs files. qmail-scanner runs as its own user (qscand), so clamd has to run under the same user. When the RPM package was first installed, it created these directories: /var/run/clamav/ and /var/log/clamav/. Chown these 2 directories to qscand (this assumes that User directives in freshclam.conf and clamd.conf have been changed to qscand), otherwise clamd and freshclam wouldn’t be able to write any logs and pid file and neither service would start.

As for the logrotate configuration, edit clamd and freshclam in /etc/logrotate.d/ to change the log files’ ownership to qscand instead of clamav. Modify line 8 where it says:

create 640 clamav clamav

to

create 640 qscand clamav

That should do the trick. :)

]]> http://blog.nirkabel.org/2007/06/24/clamavs-clamdfreshclam-permission-problems/feed/ 1