[CentOS] clamd at amavisd fails under systemd

[Rob Kampen]

On 11/11/16 13:36, Gordon Messmer wrote:
> On 11/09/2016 02:07 AM, Rob Kampen wrote:
>> so I have /etc/tmpfiles.d/clamd.amavisd.conf with content
>> d /var/run/clamd.amavisd 0755 amavis amavis -
>>
>> the process owner name and group name are amavis
>> this is not quite what you specified - which should it be?
>
> If "User" is set to amavis in the clamd configuration, that looks fine.
>
>> My real head scratch problem is that running clamd from a cli works 
>> perfectly.
>> Trying to get systemd (via systemctl start clamd at amavisd.service) 
>> brings it up but after 1 second removes the pid file and shuts down. 
>> set up clamd via the service file to use --debug and get nothing helpful
>> Trying to debug this systemd stuff seems impossible 
>
> systemd starts processes in the correct SELinux context, while running 
> it from the shell does not.  So my first guess would be that it's an 
> SELinux issue.  Use "setenforce" to put the system in permissive mode 
> to see if that's the case.  If so, "grep AVC /var/log/audit/audit.log" 
> for more info.
Another random thought
When I invoke from the CLI  - there is a -nofork=yes as a part of the 
invocation.
When systemd tries to do the invocation via the ExecStart line - the 
original clamd at .service file had this --nofork=yes also, the problem was 
that this just caused an abend of the start up with the message:
 > /usr/sbin/clamd: unrecognized option `--nofork=yes'
 > ERROR: Unknown option passed
 > ERROR: Can't parse command line options
and a look at the clamd man shows no such parameter - thus I removed it.
I wonder if this is the issue? Not sure what I can or how I can test.
Will keep playing


> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos