Quack,
On 2018-07-24 15:18, Sebastian Andrzej Siewior wrote:
On 2018-07-23 17:54:44 [+0900], Marc Dequènes wrote:
Quack,
Hi,
I just upgraded and cannot reproduce this problem. I'm not using the
ScanOnAccess feature.
just to confirm: you can not reproduce the problem.
I did not try to switch on ScanOnAccess on my production system, but
with my configuration, which is not that different, I do not have the
problem.
I just tried loading Adam's configuration on another system to test the
ScanOnAccess, copied a clamav test file in one of the protected
directory and hit the problem. After that the whole machine becomes
totally unresponsive in a few seconds.
Jul 25 11:35:14 elwing kernel: [3112805.231170] clamd (13840): Using
fanotify permission checks may lead to deadlock; tainting kernel
Jul 25 11:36:24 elwing kernel: [3112875.408154] kauditd_printk_skb: 7
callbacks suppressed
Jul 25 11:36:24 elwing kernel: [3112875.408155] audit: type=1400
audit(1532486184.205:794): apparmor="ALLOWED" operation="capable"
profile="/usr/sbin/clamd" pid=13564 comm="clamd" capability=2
capname="dac_read_search"
Jul 25 11:38:37 elwing kernel: [3113009.136000] INFO: task nfsd:20284
blocked for more than 120 seconds.
I am using kernel 4.16.16-2~bpo9+1 on this machine.
\_o<
--
Marc Dequènes
