run-cleanq runs with group Gqscanq privilege to request that the cleanq process be run once, to clean temporary files used in scanning an email for viruses. It does this by invoking the following daemontools command:
/command/svc -o /service/qscanq
Any user can invoke run-cleanq, which takes no arguments, ignores its environment and any file descriptors. Multiple invocations are ignored by the supervise process while cleanq is running. By default, each invocation of cleanq pauses for 10 seconds, so nothing interesting is to be gained by a local attacker trying to invoke run-cleanq repeatedly or rapidly.
