[Samba] vfs_virusfilter

[Stefan Kania]

Now I'm using the experimental packages from Louis with all the patches
installed, but it's still not working. Now I got:
------------
Apr 05 17:13:40 fs-01v smbd[1343]: [2021/04/05 17:13:40.768728,  0]
../source3/modules/vfs_virusfilter_clamav.c:59(virusfilter_clamav_scan_init)
Apr 05 17:13:40 fs-01v smbd[1343]:   virusfilter_clamav_scan_init:
clamd: Connecting to socket failed: /var/run/clamav/clamd.ctl: Datei
oder Verzeichnis nicht gefunden
Apr 05 17:13:40 fs-01v smbd[1343]: [2021/04/05 17:13:40.769068,  0]
../source3/modules/vfs_virusfilter.c:1095(virusfilter_scan)
Apr 05 17:13:40 fs-01v smbd[1343]:   virusfilter_scan: Scan result:
Error: /admin-share/abteilungen/eicar.txt: Initializing scanner failed
-----------
If I create the file I get:
-----------
Apr 05 17:14:12 fs-01v smbd[1343]:   virusfilter_clamav_scan_init:
clamd: Connecting to socket failed: /var/run/clamav/clamd.ctl:
Verbindungsaufbau abgelehnt
Apr 05 17:14:12 fs-01v smbd[1343]: [2021/04/05 17:14:12.579557,  0]
../source3/modules/vfs_virusfilter.c:1095(virusfilter_scan)
Apr 05 17:14:12 fs-01v smbd[1343]:   virusfilter_scan: Scan result:
Error: /admin-share/abteilungen/eicar.txt: Initializing scanner failed

-----------
So for me it's useless at the moment and for my book :-(



Am 13.03.21 um 17:24 schrieb Stefan Kania via samba:
> Hello,
> 
> I'm tying to get the virusfilter running inside a share. I use samba
> 4.14 on Debian 10 and ClamAV as scan-engine. Testing clamav on the
> commandline works fine, the EICAR-Testfile was found and quarantined or
> remeved. So I set up the following two shares:
> 
> -----------
> [abteilungen]
>         path = /admin-share/abteilungen
>         comment = Abteilungsverzeichnisse
>         vfs objects = acl_xattr virusfilter
>         guest ok = no
>         read only = no
>         browseable = no
>         virusfilter:scanner = clamav
>         virusfilter:infected file action = quarantine
> 
> [alle]
>         browseable = No
>         path = /admin-share/gemeinsame-daten
>         read only = No
>         vfs objects = full_audit virusfilter acl_xattr
>         virusfilter:infected file action = quarantine
>         virusfilter:scanner = clamav
>         full_audit:priority = NOTICE
>         full_audit:facility = LOCAL7
>         full_audit:failure = none
>         full_audit:success = create_file unlinkat
>         full_audit:prefix = |%u|%I
> 
> -------------
> Because the manpage is not telling if the directory .quarantine will be
> automatically created or must be created by hand, I left on share
> without the directory and in the other I created the directory.
> 
> After restarting smbd (I know I don't have to). I couldn't even access
> the share anymore. I saw the following error in the log.
> ----------
> Mär 13 17:15:59 fs-01 smbd[895]: [2021/03/13 17:15:59.328597,  0]
> ../../source3/modules/vfs_virusfilter.c:272(virusfilter_vfs_connect)
> Mär 13 17:15:59 fs-01 smbd[895]:   virusfilter_vfs_connect:
> virusfilter-vfs: out of memory!
> Mär 13 17:15:59 fs-01 smbd[895]: [2021/03/13 17:15:59.556552,  0]
> ../../source3/modules/vfs_virusfilter.c:272(virusfilter_vfs_connect)
> Mär 13 17:15:59 fs-01 smbd[895]:   virusfilter_vfs_connect:
> virusfilter-vfs: out of memory!
> Mär 13 17:15:59 fs-01 smbd[895]: [2021/03/13 17:15:59.557479,  0]
> ../../source3/modules/vfs_virusfilter.c:272(virusfilter_vfs_connect)
> Mär 13 17:15:59 fs-01 smbd[895]:   virusfilter_vfs_connect:
> virusfilter-vfs: out of memory!
> ----------
> Everytime I try to connect the message shows up.
> 
> So did I do something wrong? Is it a Bug?
> 
> Anyone here running the vfs_virusfilter and share a working configuration?
> 
> Stefan
> 

-- 
Stefan Kania
Landweg 13
25693 St. Michaelisdonn


Signieren jeder E-Mail hilft Spam zu reduzieren und schützt Ihre
Privatsphäre. Ein kostenfreies Zertifikat erhalten Sie unter
https://www.dgn.de/dgncert/index.html