Mailing List Archive: clamdscan problems (misunderstanding?)

clamdscan problems (misunderstanding?)

Mar 23, 2009, 11:28 AM

Post #1 of 3 (1933 views)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm running Ubuntu 8.10 AMD64 and have clamav installed from the
repositories.
I've compiled a "hello world" program with permissions 0777
the command
clamdscan hello
returns
/hello: Access denied. ERROR

I don't understand why this is so, where do the permissions required to
scan this file fail?

BTW running "clamdscan - </hello" works fine, and even changing the
ownership on the file to clamav:clamav fails.

- --
Andy Ruddock
- ------------
andy.ruddock@rainydayz.org (GPG Key ID 0xA622D452)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknH1NoACgkQfSkWkaYi1FIQ7gCgiity5Wgn1ylO7F3SqSN6UlA3
erAAoK0u41U9wGshlu2C1yOqeIM+DfvD
=vZmd
-----END PGP SIGNATURE-----
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: clamdscan problems (misunderstanding?) [ In reply to ]

rickm at ummm-beer

Mar 23, 2009, 11:48 AM

Post #2 of 3 (1815 views)

Permalink

Andy Ruddock wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I'm running Ubuntu 8.10 AMD64 and have clamav installed from the
> repositories.
> I've compiled a "hello world" program with permissions 0777
> the command
> clamdscan hello
> returns
> /hello: Access denied. ERROR
>
> I don't understand why this is so, where do the permissions required to
> scan this file fail?
>
> BTW running "clamdscan - </hello" works fine, and even changing the
> ownership on the file to clamav:clamav fails.
>

Perhaps it is in a directory that the clamav user does not have access too ?

Try copying the file to /tmp and trying it there.

Regards,

Rick

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: clamdscan problems (misunderstanding?) [ In reply to ]

andy.ruddock at rainydayz

Mar 23, 2009, 12:18 PM

Post #3 of 3 (1817 views)

Permalink

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rick Macdougall wrote:
> Andy Ruddock wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> I'm running Ubuntu 8.10 AMD64 and have clamav installed from the
>> repositories.
>> I've compiled a "hello world" program with permissions 0777
>> the command
>> clamdscan hello
>> returns
>> /hello: Access denied. ERROR
>>
>> I don't understand why this is so, where do the permissions required to
>> scan this file fail?
>>
>> BTW running "clamdscan - </hello" works fine, and even changing the
>> ownership on the file to clamav:clamav fails.
>>
>
> Perhaps it is in a directory that the clamav user does not have access too ?
>
> Try copying the file to /tmp and trying it there.
>
> Regards,
>
> Rick

Ok, that works. Now I'm really confused.
I made another directory with the same permissions as tmp, clamdscan
failed in that - then I remembered reading about a similar problem
somebody had with another application.
Turning AppArmor off allows clamdscan to scan as expected.

I'll need to investigate AppArmor now.

Thanks.

- --
Andy Ruddock
- ------------
andy.ruddock@rainydayz.org (GPG Key ID 0xA622D452)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknH4GIACgkQfSkWkaYi1FKG3wCdH1HmUTi+SUHALlx6ZDndgpa7
1rQAoIYp60QWN20bzg56SphqqE9zMx3i
=7pQF
-----END PGP SIGNATURE-----
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net