Topic: sudden permissions change

[pkidd]

If I knew why I could post the relevant data...
but any ideas why permissions on the following directories might have changed - users, one ibay, and daemontools (/packages...command) - what cron job for example might do that (flexbackup, clamav?)
Possibly other directories are affected, but the above restricted user access, and created a denial of speedy service (no permission to access the daemontools causing a loop)

[mbachmann]

I read something about clamav changing permissions if Scheduled filesystem scanning is enabled. But i'm not sure in which configurations/versions this occurs. I've disabled it.

[wyron]

mbachmann wrote: >>I've disabled it.
So have I ! - or rather, after a complete restoration, taking me the better part of a week, I simply didn't reinstall it.
It played havoc with permissions and ownerships both, in every ibay, on a PII-400Mhz/512Mb configuration.
The gurus recommend newer hardware, and plenty of it, to solve these issues, since they originate in overburdening hardware like P2's and P3's with insufficient RAM.
I for one won't even think about Clamav/SpamAssassin again until I'm at P4-level with at least 512Mb (rather 1Gb) next month.

[pkidd]

thanks, a Scheduled filesystem scan appears to be the culprit - it's off for now

[mbachmann]

wyron was the one who reported the issue with clamav initially after a server breakdown, that's were i've read it.

[mrjhb3]

Is the schedule filesystem scan from CLAMAV really the culprit here?  Has anyone dug in to see what clam is changing the permissions?

thanks,

JB

[bobd]

Describe all software you've installed on SME.

[bobd]

Describe all software you've installed on SME.

[pkidd]

bobd, was that question for me.  there is (I thought I had looked before posting this question initially) an earlier thread on this problem and how variable the experience was - someone felt it was an interaction with Spamassassin.  I do have Spamassassin running.  As to other software loaded, there is some, but in three years (and three systems) this was the first time I'd experienced this problem (mailfront also got affected). A scheduled scan (weekly, first occurence) and a tweak to flexbackup (buffer size) were the only changes to this server I believe I'd made in the week or two before this problem, so I had a predisposition to accept the Scheduled Scan comment
I hope someone can find the interaction (I guess someone should mention it to pagefault.org whose fine work I am using)

[brianr]

I've also just experienced some permission changes in directories - Ibays in this case - they lost the set group id bit, which means they were no longer visible through Samba to the Windows clients.  Looking at the times of the directory creation, I wondered if they were created while the overnight Clamscan was running (it runs into the early morning).  I have set the Clamscan to be weekly over the weekend now, and will see if the problem re-occurs.