Re: [Dazuko-help] Dazuko doesn't fire in cron job?

[John Ogness]

On 2009-01-25, Kevin Keane <address@hidden> wrote:
> I've got an odd problem: I set up Clamuko to monitor some shared
> directories on my server. Then I created a script to verify that
> Clamuko works.
>
> This script works fine when invoked from the command line (as
> root). When running the exact same identical script from a cron job
> (also as root), it fails.
>
> The script simply writes the eicar.com test virus to a protected
> location, and then tries to delete it again. Dazuko/ClamAV should of
> course prevent that from happening.

No, Dazuko/ClamAV would not prevent that. Neither creating the file
nor deleting it involve "accessing" the contents.

> From the command line, I can create the eicar.com virus file (not
> sure why, but I can live with that), but get an "Access denied"
> error when trying to delete it - which is as expected.

You should not be getting an "Access denied" message. The access is
not being denied by Dazuko/ClamAV.

> From a cron job, creating the virus works, but deleting the file
> also succeeds.

This is correct behavior.

> Any suggestions what I may be doing wrong?

Your test script should do the following:

1. copy the eicar.com file to a test directory
2. access the contents (cat /test/dir/eicar.com > /dev/null)
3. delete eicar.com

>From the above, only step 2 will fail if Dazuko/ClamAV are active.

John Ogness

-- 
Dazuko Maintainer