[Bug 645956] Re: appamor denying clamd access to its own process
Richard, this should be safe, but can you file a new bug using 'ubuntu- bug clamav-daemon' and give steps to reproduce? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to clamav in Ubuntu. https://bugs.launchpad.net/bugs/645956 Title: appamor denying clamd access to its own process To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/645956/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
This is happening to me on a 12.04 install:
[1793012.835201] type=1400 audit(1336690883.803:534): apparmor=DENIED
operation=open parent=26571 profile=/usr/sbin/clamd
name=/proc/26820/status pid=26820 comm=clamd requested_mask=r
denied_mask=r fsuid=110 ouid=0
If I remove owner from the @{PROC}/[0-9]*/status line in the apparmor
policy, it works. I'm not sure if that's safe though.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in Ubuntu.
https://bugs.launchpad.net/bugs/645956
Title:
appamor denying clamd access to its own process
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/645956/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
** Attachment added: Dependencies.txt https://bugs.edge.launchpad.net/bugs/645956/+attachment/1626525/+files/Dependencies.txt -- appamor denying clamd access to its own process https://bugs.launchpad.net/bugs/645956 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to clamav in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
It looks like this needs the same fix in usr.sbin.clamd as we had for
freshclam. Ie:
owner @{PROC}/[0-9]*/status r,
** Tags added: apparmor
** Tags removed: amd64 apport-bug
--
appamor denying clamd access to its own process
https://bugs.launchpad.net/bugs/645956
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
** Changed in: clamav (Ubuntu) Importance: Undecided = Low ** Changed in: clamav (Ubuntu) Status: New = In Progress ** Changed in: clamav (Ubuntu) Milestone: None = ubuntu-10.10 ** Changed in: clamav (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- appamor denying clamd access to its own process https://bugs.launchpad.net/bugs/645956 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to clamav in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
** Changed in: clamav (Ubuntu) Status: In Progress = Fix Committed -- appamor denying clamd access to its own process https://bugs.launchpad.net/bugs/645956 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to clamav in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 645956] Re: appamor denying clamd access to its own process
This bug was fixed in the package clamav - 0.96.3+dfsg-1ubuntu4
---
clamav (0.96.3+dfsg-1ubuntu4) maverick; urgency=low
* debian/usr.sbin.clamd: updated to give read access to
@{PROC}/[0-9]*/status and @{PROC}/filesystems. The latter is covered by
the base abstraction, but we add it here to ease backporting.
- LP: #645956
-- Jamie Strandboge ja...@ubuntu.com Thu, 23 Sep 2010 07:58:35 -0500
** Changed in: clamav (Ubuntu)
Status: Fix Committed = Fix Released
--
appamor denying clamd access to its own process
https://bugs.launchpad.net/bugs/645956
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
