Browse code

bb#1789 - final

aCaB authored on 2010/02/05 06:19:28
Showing 4 changed files
... ...
@@ -1,3 +1,9 @@
1
+Thu Feb  4 22:17:49 CET 2010 (acab)
2
+-----------------------------------
3
+ * clamd: new options LocalSocketMode and LocalSocketGroup
4
+ * clamav-milter: new options MilterSocketMode and MilterSocketGroup
5
+   (bb#1789)
6
+
1 7
 Wed Feb  3 18:23:08 CET 2010 (tk)
2 8
 ---------------------------------
3 9
  * clamdscan: fix error logic once again
... ...
@@ -85,6 +85,16 @@ Default: @DBDIR@
85 85
 Path to a local (Unix) socket the daemon will listen on.
86 86
 .br 
87 87
 Default: no
88
+.TP
89
+\fLocalSocketGroup STRING
90
+Sets the group ownership on the unix socket.
91
+.br
92
+Default: the primary group of the user running clamd
93
+.TP
94
+\fLocalSocketMode STRING
95
+Sets the permissions on the unix socket to the specified mode.
96
+.br
97
+Default: socket is world readable and writable
88 98
 .TP 
89 99
 \fBFixStaleSocket BOOL\fR
90 100
 Remove stale socket after unclean shutdown.
... ...
@@ -20,6 +20,14 @@ Example
20 20
 #MilterSocket /tmp/clamav-milter.socket
21 21
 #MilterSocket inet:7357
22 22
 
23
+# Define the group ownership for the (unix) milter socket.
24
+# Default: disabled (the primary group of the user running clamd)
25
+#MilterSocketGroup virusgroup
26
+
27
+# Sets the permissions on the (unix) milter socket to the specified mode.
28
+# Default: disabled (obey umask)
29
+#MilterSocketMode 660
30
+
23 31
 # Remove stale socket after unclean shutdown.
24 32
 #
25 33
 # Default: yes
... ...
@@ -73,7 +73,15 @@ Example
73 73
 
74 74
 # Path to a local socket file the daemon will listen on.
75 75
 # Default: disabled (must be specified by a user)
76
-LocalSocket /tmp/clamd.socket
76
+#LocalSocket /tmp/clamd.socket
77
+
78
+# Sets the group ownership on the unix socket.
79
+# Default: disabled (the primary group of the user running clamd)
80
+#LocalSocketGroup virusgroup
81
+
82
+# Sets the permissions on the unix socket to the specified mode.
83
+# Default: disabled (socket is world accessible)
84
+#LocalSocketMode 660
77 85
 
78 86
 # Remove stale socket after unclean shutdown.
79 87
 # Default: yes