Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: khaluk on September 18, 2012, 10:02:18 pm

Title: Samba Antivirus problem
Post by: khaluk on September 18, 2012, 10:02:18 pm

Hi,
I just install Z3 on a clean ubuntu installation from repo as described in installation documents.
I want to test samba and zavs with Eicar Test File. If I copy a virus test file into share I got an error like below. (/var/log/syslog)

Code: [Select]

Sep 18 22:55:07 nif smbd_audit: (filetype_skipscan:127): exclude list is empty - feature disabled
Sep 18 22:55:07 nif smbd_audit: INFO: VIRUS DETECTED! virus 'Eicar-Test-Signature' detected in file '/home/samba/shares/ORTAK/eicar.zip'
Sep 18 22:55:07 nif smbd_audit: (zavs_quarantine_virus:61): Quarantine temp file is: /home/samba/quarantine/infected_eicar.zip.BqbUsE
Sep 18 22:55:07 nif smbd_audit: ERROR: Cannot create unique quarantine file, reason: Permission denied
Ok. It detects virus and try to move the file to quarantine directory but cannot.
I think there are some permission problem for clamav daemon.
ls -al output for /home/samba is

Code: [Select]

root@nif:/home/samba# ls -la
total 20
drwxrwx---+ 5 root __USERS__ 4096 Sep 18 22:12 .
drwxr-xr-x  8 root root      4096 Sep 18 22:36 ..
drwxrwx---  5 root __USERS__ 4096 Sep 18 22:13 profiles
-rw-r--r--  1 root root         0 Sep 18 22:12 .provisioned
drwx-wx---+ 2 root __USERS__ 4096 Sep 18 22:12 quarantine
drwxrwx---+ 3 root __USERS__ 4096 Sep 18 22:12 shares
root@nif:/home/samba#
How can fix this error?
Thanks.
_{Modified: Added "Help" to subject}

Title: Re: Samba Antivirus problem
Post by: khaluk on September 21, 2012, 01:40:07 pm

I change subject to Samba Antivirus problem.

Title: Re: Samba Antivirus problem
Post by: robb on September 22, 2012, 12:34:03 am

Quote

drwx-wx---+ 2 root __USERS__ 4096 Sep 18 22:12 quarantine

Can you check if the clamAVd is member of the __USERS__ group? At least, seeing that line the only users except root that have write permission in the quarantine directory are in __USERS__ group.

After some searching: http://www.gossamer-threads.com/lists/clamav/users/55442 Is this of any help?

Title: Re: Samba Antivirus problem
Post by: jsalamero on October 07, 2012, 11:38:50 am

I couldn't reproduce this on a clean install with Samba 4 RC2 and zentyal-samba 3.0.2.