Re: Update to fix sophie following SAVI semaphore changes

this is working for us.
a week "test" running on a non-critical moderate-load mail server, and
things are back to normal again.

cheers;


On Wed, May 18, 2005 12:10 pm, Richard Baldry said:
> One of my colleagues has developed a patch to sophie 3.04rc2 that
> resolves the issue encountered recently where SAVI reports files
> as corrupt when sophie is started as root.
>
> The problem has arisen because of some new semaphores that were
> added to improve thread safety for the virus data reloading
> functionality. These semaphores were, of necessity, created with
> relatively restrictive permissions. This means that when sophie
> changes to a less privileged id after forking it can no longer
> access the semaphore. It's not clear why this returns a 'corrupt'
> error, but that's another story.
>
> The patch can be downloaded from
>
> http://www.clanfield.info/sophie/sophie-semaphore-fix-3.04rc2.patch.gz
>
> This patch changes the way sophie starts up. The main process
> now just creates the socket and the pidfile. It then forks a
> new master process under the less privilged uid and gid. This
> process creates the SAVI instance and monitors the socket for
> connections. The main process just sits and waits for the
> master process to terminate. THis means that you will always see
> at least 2 sophie processes running.
>
> If you've experienced the problems, please try the patch and let
> me know how you get on.
>
> Note that switching back to the non glibc-2.2 version of SAVI is
> not a long-term solution because Sophos will be making the
> same changes to that version next month.
>
> Regards
> Rich
>
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>
>
>
>


-- 
Chris Hoy Poy
IT Support

MPL Group Pty Ltd
89-91 Burswood Rd
Burswood WA 6100

Ph:  08 9355 7100
Fax: 08 9355 7111
www.mpl.com.au

The Leader In Health, Safety and Environmental Risk Solutions

Please note: This email may contain PRIVILEGED and/or CONFIDENTIAL
INFORMATION intended only for the use of the addressee. If you are not the
addressee, or the person responsible for delivering it to the person
addressed, you may not copy or deliver this to anyone else. If you have
received this email by mistake, please notify us by telephone. MPL Group
Pty Ltd will NOT be liable for any unauthorised use of the information
contained in this email. If you do not wish to receive future emails of a
commercial nature from MPL, please respond to this email advising us.  All
email traffic into and out of this company is monitored routinely for
administrative purposes. Thank you.