I use Courier MTA, SAVI as the virus scanner and a Debian system with glibc
2.3.2 (heavily patched as all distros' libcs are).
In testing amavisd-new 2.3.2-pre1, I discovered that all messages were being
passed as clean by amavisd-new, including those containing EICAR-AV-TEST,
and in the log there was:
ask_av (Sophos SAVI) result: CLEAN p001: error scann
ing file /var/amavis/amavis-20050601T210341-20139/parts/p001, Sweep could
not proceed, the file was corrupted (538) No such file or directory

In fact this occurred with amavisd-new 2.3.1 as well so I am fairly sure
that it is not amavisd-new's fault.  Initially it occurred with SAVI 3.93; I
then upgraded to SAVI 3.98 and the problem persists.  All the above is with
the glibc 2.2 version of SAVI.  However I tried the non-glibc 2.2 version of
SAVI and it works correctly.

Scanning the file manually with sweep, with a simple perl -e script to call
SAVI, and even by copying Amavis::AV into a script and calling
sophos_savi_init, sophos_savi_internal directly all find the virus with both
SAVI variants, so it could be related to threading.

This looks as though it could be connected to 
http://www.vanja.com/listarc/vtools/2005-May/001732.html
http://www.vanja.com/listarc/vtools/2005-May/001750.html
although there should not be a problem with user permissions, as even the
very first amavisd-new process is started as the daemon user and amavisd-new
never drops privileges.

Has anyone else had trouble with the glibc 2.2 version of SAVI?

-- 
Martin Orr
Linux Administrator,
Methodist College Belfast


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to