Package: amavisd-new Version: 1:2.11.0-6.1 Severity: minor Dear Maintainer,
while reading the Debian specific documentation on how to setup amavisd-new with clamav-daemon, I found this stance in README.Debian: " If you use clamav-daemon, make sure that it is configured to init supplementary groups when it drops privileges, and that you add the clamav user to the amavis group: add AllowSupplementaryGroups to /etc/clamav/clamd.conf if it is not there yet, and run "adduser clamav amavis" as root. The preferred method for using other virus scanners which run as a different unprivileged user is to change their primary group to amavis (you can change this with "usermod -g"). " The AllowSupplementaryGroups has been deprecated for years (2016 maybe?) and I think this paragraph should be updated to clarify the situation. - is adding the clamav user to the amavis group enough? - should the amavis group should be made primary to clamav as of now? - or any other correct configuration path? Many thanks, -- Charles -- System Information: Debian Release: 10.5 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-10-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages amavisd-new depends on: ii adduser 3.118 ii debconf [debconf-2.0] 1.5.71 ii file 1:5.35-4+deb10u1 ii init-system-helpers 1.56+nmu1 pn libarchive-tar-perl <none> ii libarchive-zip-perl 1.64-1 ii libberkeleydb-perl 0.55-2 ii libconvert-tnef-perl 0.18-1 ii libconvert-uulib-perl 1:1.5~dfsg-1+b1 pn libdigest-md5-perl <none> ii libio-stringy-perl 2.111-3 ii libmail-dkim-perl 0.54-1 ii libmailtools-perl 2.18-1 pn libmime-base64-perl <none> ii libmime-tools-perl 5.509-1 ii libnet-libidn-perl 0.12.ds-3+b1 ii libnet-server-perl 2.009-1 ii libunix-syslog-perl 1.1-3+b1 ii lsb-base 10.2019051400 ii pax 1:20190224-1 ii perl [libtime-hires-perl] 5.28.1-6+deb10u1 Versions of packages amavisd-new recommends: ii altermime 0.3.10-9 ii libnet-patricia-perl 1.22-1+b5 pn ripole <none> Versions of packages amavisd-new suggests: pn apt-listchanges <none> ii arj 3.10.22-18 ii cabextract 1.9-1 ii clamav 0.102.4+dfsg-0+deb10u1 ii clamav-daemon 0.102.4+dfsg-0+deb10u1 ii cpio 2.12+dfsg-9 pn dspam <none> ii lhasa 0.3.1-3 ii libauthen-sasl-perl 2.1600-1 pn libdbi-perl <none> ii libmail-dkim-perl 0.54-1 pn libnet-ldap-perl <none> pn libsnmp-perl <none> pn libzeromq-perl <none> pn lzop <none> ii nomarch 1.4-3+b2 pn p7zip <none> pn rpm <none> ii spamassassin 3.4.2-1+deb10u2 ii unrar 1:5.6.6-1 -- no debconf information
