This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Systemd File for SAVDID

Hi,

 

does anyone have a working savdid.service file for SAVDI ?

I tried to create one but its not working:

 

[Unit]
Description=SAV Dynamic Interface (SAVDI) for Sophos Anti-Virus for Linux.
After=network.target


[Service]
Type=forking
PIDFile=/var/tmp/savdi/new.pid
ExecStart=/usr/local/bin/savdid -d -c /usr/local/savdi/savdid.conf
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
PrivateTmp=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target



This thread was automatically locked due to age.
  • Just curios about the purpose of this file.

    I don't see what it "wants" to capture. If nothing. are you trying to create for savdi itself ?

    Not sure if this works for you however, it is a general template as seen below

     

    Try adding User, Group and Wants

     

    [Unit]
    Description=SAV Dynamic Interface (SAVDI) is an interface between Amavis and Sophos Anti-Virus for Linux.
    After=network.target
    Wants= //service name

    [Service]
    Type=forking
    User=  // User Name
    Group=  //Group Name
    PIDFile=/var/run/sophos/savdi.pid
    ExecStart=/usr/local/bin/savdid -d -c /usr/local/savdi/savdid.conf
    ExecReload=/bin/kill -HUP $MAINPID
    Restart=on-failure
    PrivateTmp=true
    NoNewPrivileges=true

    [Install]
    WantedBy=multi-user.target

    Ismail Jaweed Ahmed (Ismail) 
    Senior Professional Service Engineer

  • Hi Hans Wurst,

    Can you please let us know what is that you are trying to achieve? 

    Regards,

    Gowtham Mani
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • The systemd unit file below works for me on RHEL 7.

    /etc/systemd/system/savdid.service:

    [Unit]
    Description=Sophos SAV Dynamic Interface Daemon
    After=network.target

    [Service]
    Type=forking
    PIDFile=/var/run/savdid.pid
    ExecStart=/usr/local/bin/savdid -d -c /etc/savdid.conf -f /var/run/savdid.pid -s
    ExecReload=/bin/kill -HUP $MAINPID
    Restart=on-failure
    PrivateTmp=true
    ProtectSystem=full
    ProtectHome=true

    [Install]
    WantedBy=multi-user.target

     

    Savdid does not start if there is an unprivileged user/group enforcement in systemd unit file itself, however it does start if unprivileged user/group is configured in savdid.conf instead.