FYI, someone in a Sohos forum posted a workaround that can help relieve some of the pain with the issues caused by the product until it's more thoroughly diagnosed and addressed: adding pre & post rules to temporarily deactivate the AV on-access scanner while updates take place. Quoting from the forum post:
> I did this by creating the file /etc/apt/apt.conf.d/00sav-protect with the contents: DPkg::Pre-Invoke { "echo Stopping sav-protect..."; "systemctl stop sav-protect.service"; "echo Done"; }; DPkg::Post-Invoke { "echo Starting sav-protect..."; "systemctl start sav-protect.service"; "echo Done"; }; See https://community.sophos.com/products/server-protection- integration/f/sophos-anti-virus-for-linux-basic/117256/sav-protect- service-breaks-system-updates-on-ubuntu/425935#425935 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1685984 Title: packages (multiple) failed to install/upgrade: unable to open 'xxxxx .dpkg-new': Operation not permitted To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1685984/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs