I can confirm that adding 
   /etc/ssl/openssl.cnf r,

to /etc/apparmor.d/usr.bin.freshclam and /etc/apparmor.d/usr.sbin.clamd

then run:
apparmor_parser -r /etc/apparmor.d/usr.bin.freshclam
apparmor_parser -r /etc/apparmor.d/usr.sbin.clamd

Makes the apparmor="DENIED" go away.
Also gets rid of the syslog warning -  kernel: [   11.240463] 
kauditd_printk_skb: 16 callbacks suppressed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1839767

Title:
  apparmor DENIED freshclam and clamd access to openssl.cnf

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1839767/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to