Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My exim4 don't send any message. The logs says

2011-03-09 15:59:57 1PxKrl-00038i-BT malware acl condition: clamd: ClamAV returned /var/spool/exim4/scan/1PxKrl-00038i-BT: lstat() failed: Permission denied. ERROR

I supose that clamav (running clamd) does'nt have access rights on the mentioned file, but clamav is in the same group as Debian-exim (running exim4). Even changing the folder permissions to a+rwx has no effect.

Any idea where to look for failure reason ?

share|improve this question
Clamav shouldn't need to be in the same group as exim. It should be in in its own group (clamav). – BillThor Mar 9 '11 at 16:05
clamav is member of both: Debian-exim and clamav. I don't add this to /etc/group so i guess that comes from the install script. I mentioned this, because of posts on other sites regarding this error. – PeterMmm Mar 9 '11 at 16:09
up vote 7 down vote accepted

Directory permissions on /var/spool/exim4/scan should be 750, and owned by the exim user and its primary group (on my FreeBSD systems, these are mailnull and mail, respectively).

If your clamav user has Debian-exim as a supplementary group - that is, if Debian-exim is not its primary group, then you need "AllowSupplementaryGroups yes" in your clamd.conf (and clamd must be started by root).

share|improve this answer
Ok, putting clamav in Debian-exim as primary group and clamav as supplementary is working. – PeterMmm Mar 9 '11 at 18:24

I had the same problem on Centos 6.2 running exim4 with clamAV, solved it by adding clam user to the mail group.

# usermod -a -G mail clam
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.