This version has expired
** Changed in: clamav (Ubuntu)
Status: Triaged = Invalid
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in Ubuntu.
https://bugs.launchpad.net/bugs/585026
Title:
freshclam won't execute
This sounds like a feature request - wishlist ?
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in Ubuntu.
https://bugs.launchpad.net/bugs/585026
Title:
freshclam won't execute /etc/clamav/onupdateexecute.d scripts
To manage
** Changed in: clamav (Ubuntu)
Status: Incomplete = Triaged
--
freshclam won't execute /etc/clamav/onupdateexecute.d scripts
https://bugs.launchpad.net/bugs/585026
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.
Thanks for reporting this issue.
The default apparmor profile for the freshclam binary doesn't contain
rules for scripts added to the /etc/clamav/onupdateexecute.d directory
as we can't predict what those scripts will be doing.
You can fix this is one of three ways:
1- Modify the
In the long run, the solution is to have freshclam use a helper
application. The helper application would run unconfined but would only
run stuff that is in those directories, and the main freshclam binary
wouldn't be able to write to those directories.
For now, about all I can do is extend the
The result:
[1754543.251421] type=1505 audit(1274733521.551:129):
operation=profile_replace pid=25980 name=/usr/bin/freshclam
[1765351.326452] type=1502 audit(1274744329.626:130): operation=exec
pid=24546 parent=24545 profile=/usr/bin/freshclam requested_mask=::x
denied_mask=::x fsuid=107
** Attachment added: Dependencies.txt
http://launchpadlibrarian.net/49028777/Dependencies.txt
--
freshclam won't execute /etc/clamav/onupdateexecute.d scripts
https://bugs.launchpad.net/bugs/585026
You received this bug notification because you are a member of Ubuntu
Server Team, which is
Please put apparmor in complain mode and provide the log results. The
process is described in https://wiki.ubuntu.com/DebuggingApparmor
I'm currently preparing a post-release update for clamav to update to
clamav 0.96.1, so if we can get this answered quickly I ought to be able
to include it.
