Re: quarantine directory not working dor vscan-sophos

On Tue, Dec 07, 2004 at 10:49:25AM +0100, Thomas H?nig wrote:

> # snippet from /etc/samba/smb.conf
> 
> [vscan]
>    comment = virus-protected /tmp directory
>    path = /tmp
>    vfs object = vscan-sophos
>    vscan-sophos: config-file = /etc/samba/vscan-sophos.conf
>    writeable = yes
>    browseable = yes
>    guest ok = yes


Looks OK.

> 
> # snippet from /etc/samba/vscan-sophos.conf:
> 
> ; where to put infected files - you really want to change this!
> ; it has to be on the same physical device as the share!
> quarantine directory  = /virus/ 
> # /virus (w/o trailing "/") does not work either
> 
> ; prefix for files in quarantine
> quarantine prefix = vxx-

Looks OK as well.

> Dec  7 10:41:43 thomas smbd_vscan-sophos[4428]: ERROR: quarantining file '/tmp/eicar.com' to '/var/tmp/vxx-BUVnfh' failed, reason: Operation not permitted

If no config file is used, the defaults are "vir-" and "/tmp", but the
log snippet shows "vxx-" and "/var/tmp", so vscan-sophos seems to read
a config file. Do you have two entries of [vscan]?

You might set the "debug level = 3" in smb.conf and then check the log
file of smbd (e.g. /usr/local/samba/var/log.smbd. samba-vscan prints
out all settings parsed from the configuration file then.

best regards
Rainer Link


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/