Solved ConfigServer eXploit Scanner

[alinajafi]

Clamd Error for [SCAN /home/globalsys/domains/g********e.com/public_html/wp-admin/link.php]: /home/globalsys/domains/g****e.com/public_html/wp-admin/link.php: File path check failure: Permission denied. ERROR

Hi the all directories of this user is access denied

 

[zEitEr]

Hello,

CentOS/Redhat/AlmaLinux:

# Test and see current user
grep --color -E "^(#|)User" /etc/clamd.d/scan.conf

# Disable it
perl -pi -e 's/^User /#User /' /etc/clamd.d/scan.conf

Debian/Ubuntu:

# Test and see current user
grep --color -E "^(#|)User" /etc/clamav/clamd.conf

# Disable it
perl -pi -e 's/^User /#User /' /etc/clamav/clamd.conf

and restart clamav daemon.

 

[Richard G]

Hi the all directories of this user is access denied

Only that user and no problem with other users?

 

[zEitEr]

Only that user and no problem with other users?

Clamav when installed from OS repositories can not read user's homedirs. So it is the same for all users, unless clamav runs under root privileges. If the clamav ran under root user, the error would not happen.

 

[alinajafi]

Hello,

CentOS/Redhat/AlmaLinux:

# Test and see current user
grep --color -E "^(#|)User" /etc/clamd.d/scan.conf

# Disable it
perl -pi -e 's/^User /#User /' /etc/clamd.d/scan.conf

Debian/Ubuntu:

# Test and see current user
grep --color -E "^(#|)User" /etc/clamav/clamd.conf

# Disable it
perl -pi -e 's/^User /#User /' /etc/clamav/clamd.conf

and restart clamav daemon.

sir You Always was good and Most kind to me
always solved all problems most kind

 

[alinajafi]

Only that user and no problem with other users?

All

 

[Richard G]

So it is the same for all users

Yes that's correct. So that is the reason why I asked, because specifically was written "this user" and not "all users" or "users" which made me wonder if it could be a wrong permission issue no the users homedir in some way or something similar.
Which would wonder me too as Clamd is normally run as root. But just wanted to ask to be sure.