Bug 2165392 - systemd unit and config file updates after preferring clamdscan
Summary: systemd unit and config file updates after preferring clamdscan
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: amavis
Version: 37
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Juan Orti
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-01-29 18:29 UTC by Anthony Messina
Modified: 2023-03-11 03:08 UTC (History)
3 users (show)

Fixed In Version: amavis-2.13.0-3.fc37
Clone Of:
Environment:
Last Closed: 2023-03-04 02:17:48 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Anthony Messina 2023-01-29 18:29:35 UTC
With the recent change to prefer "clamdscan" and disable "clamd with direct socket communication," the following changes would need to be made on a Fedora system in order to make use of the default clamd

Option 1 (run a separate clamd on the machine):
1. The ClamAV-clamdscan entry in amavisd.conf would need to add "--config-file=/etc/clamd.d/amavisd.conf" to the options
2. The commented entry for the old ClamAV-clamd needs the socket changed to "/run/clamd.amavisd/clamd.sock"

Option 2 (run a single clamd on the machine):
1. The "amavis" user needs to be added the "virusgroup" group
2. The amavisd.service unit should remove "Wants=clamd" and add "Wants=clamd"
3. Proper access to /run/clamd.scan directory needs to be made

Option 1 keeps allows amavisd to use it's own ClamAV config file, but if other services on the machine are using the default clamd, will run two clamd processes.

This bug is entered to clarify that the default preference doesn't work out of the box any longer and some discussion may occur as to what is the "best" way forward.

Thanks for your consideration.

Comment 1 Juan Orti 2023-02-23 19:43:08 UTC
Hi, thanks for the report.

I'm going to do option 1, which is in line with what amavis was already doing. I'll submit an update shortly.

Comment 2 Fedora Update System 2023-02-23 19:54:46 UTC
FEDORA-2023-3027d661fa has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2023-3027d661fa

Comment 3 Fedora Update System 2023-02-23 20:06:59 UTC
FEDORA-2023-dc2766d6fd has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2023-dc2766d6fd

Comment 4 Fedora Update System 2023-02-23 20:09:26 UTC
FEDORA-2023-8ce0355811 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2023-8ce0355811

Comment 5 Fedora Update System 2023-02-24 03:38:45 UTC
FEDORA-2023-dc2766d6fd has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-dc2766d6fd`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-dc2766d6fd

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2023-02-24 04:34:25 UTC
FEDORA-2023-3027d661fa has been pushed to the Fedora 38 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-3027d661fa

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2023-02-24 06:02:26 UTC
FEDORA-2023-8ce0355811 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-8ce0355811`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-8ce0355811

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2023-02-25 08:18:42 UTC
FEDORA-EPEL-2023-210f3a38ad has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-210f3a38ad

Comment 9 Fedora Update System 2023-02-26 01:52:06 UTC
FEDORA-EPEL-2023-210f3a38ad has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-210f3a38ad

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2023-03-04 01:36:09 UTC
FEDORA-2023-8ce0355811 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2023-03-04 02:17:48 UTC
FEDORA-2023-dc2766d6fd has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 12 Fedora Update System 2023-03-06 00:41:06 UTC
FEDORA-EPEL-2023-210f3a38ad has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 13 Stefano Biagiotti 2023-03-07 08:28:09 UTC
Can you please build this one in epel7 and epel8 too?

Comment 14 Fedora Update System 2023-03-11 03:08:04 UTC
FEDORA-2023-3027d661fa has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.