@@ -1,3 +1,9 @@

+Thu Feb  4 22:17:49 CET 2010 (acab)

+-----------------------------------

+ * clamd: new options LocalSocketMode and LocalSocketGroup

+ * clamav-milter: new options MilterSocketMode and MilterSocketGroup

+   (bb#1789)

+

 Wed Feb  3 18:23:08 CET 2010 (tk)

 ---------------------------------

  * clamdscan: fix error logic once again

@@ -85,6 +85,16 @@ Default: @DBDIR@

 Path to a local (Unix) socket the daemon will listen on.

 .br 

 Default: no

+.TP

+\fLocalSocketGroup STRING

+Sets the group ownership on the unix socket.

+.br

+Default: the primary group of the user running clamd

+.TP

+\fLocalSocketMode STRING

+Sets the permissions on the unix socket to the specified mode.

+.br

+Default: socket is world readable and writable

 .TP 

 \fBFixStaleSocket BOOL\fR

 Remove stale socket after unclean shutdown.

@@ -20,6 +20,14 @@ Example

 #MilterSocket /tmp/clamav-milter.socket

 #MilterSocket inet:7357

+# Define the group ownership for the (unix) milter socket.

+# Default: disabled (the primary group of the user running clamd)

+#MilterSocketGroup virusgroup

+

+# Sets the permissions on the (unix) milter socket to the specified mode.

+# Default: disabled (obey umask)

+#MilterSocketMode 660

+

 # Remove stale socket after unclean shutdown.

 #

 # Default: yes

@@ -73,7 +73,15 @@ Example

 # Path to a local socket file the daemon will listen on.

 # Default: disabled (must be specified by a user)

-LocalSocket /tmp/clamd.socket

+#LocalSocket /tmp/clamd.socket

+

+# Sets the group ownership on the unix socket.

+# Default: disabled (the primary group of the user running clamd)

+#LocalSocketGroup virusgroup

+

+# Sets the permissions on the unix socket to the specified mode.

+# Default: disabled (socket is world accessible)

+#LocalSocketMode 660

 # Remove stale socket after unclean shutdown.

 # Default: yes