Can I ask how you can reproduce this exactly? Running freshclam as root, or as clamav user is working fine for me, and I don't have any DNS recursor running on 127.0.0.1 .
Also, I'm no apparmor expert but there is a line in /etc/apparmor.d/usr.bin.freshclam, like this: root@utest-mms32:~# cat /etc/apparmor.d/usr.bin.freshclam |grep nameser #include <abstractions/nameservice> This includes some other basic rules which do allow read-only access to /etc/resolv.conf: root@utest-mms32:~# cat /etc/apparmor.d/abstractions/nameservice |grep resolv.conf /etc/resolv.conf r, At least this is what I have in the default usr.bin.freshclam on Maverick. ** Changed in: clamav (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/784060 Title: freshclam fails in DNS query due to apparmor To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/784060/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs