clamav apparmor profile doesn't work with exim

Bug #288110 reported by James Troup
2
Affects Status Importance Assigned to Milestone
clamav (Ubuntu)
Fix Released
Medium
Jamie Strandboge

Bug Description

Binary package hint: clamav

After upgrading to intrepid, I got the following in my syslog everytime clamav ran:

Oct 23 13:26:31 tuna kernel: [ 1078.316534] type=1502 audit(1224764791.739:36): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=112 name="/var/spool/exim4/scan/1KszGp-0002DK-F2/1KszGp-0002DK-F2-00000.com" pid=8515 profile="/usr/sbin/clamd"

Adding '/var/spool/exim4/** r,' (as suggested by Jamie) to the clamd apparmor profile silenced these warnings.

ProblemType: Bug
Architecture: i386
DistroRelease: Ubuntu 8.10
Package: clamav-daemon 0.94.dfsg.1~rc1-0ubuntu1 [modified: etc/apparmor.d/usr.sbin.clamd]
ProcEnviron:
 PATH=/usr/lib/ccache:/home/username/bin:/sbin:/usr/sbin:/usr/lib/ccache:/home/username/bin:/sbin:/usr/sbin:/home/username/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_GB.UTF-8
 SHELL=/usr/bin/zsh
SourcePackage: clamav
Uname: Linux 2.6.27-7-generic i686

Tags: apport-bug

Related branches

Revision history for this message
James Troup (elmo) wrote :
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This is a regression over ealier versions of clamav

Changed in clamav:
assignee: nobody → jdstrand
importance: Undecided → Medium
milestone: none → ubuntu-8.10
status: New → In Progress
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Regression potential is very low as this only adds access to /var/spool/exim4 to clamd.

Changed in clamav:
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package clamav - 0.94.dfsg.1~rc1-0ubuntu2

---------------
clamav (0.94.dfsg.1~rc1-0ubuntu2) intrepid; urgency=low

  * update clamd profile for use with exim (LP: #288110)

 -- Jamie Strandboge <email address hidden> Thu, 23 Oct 2008 07:36:11 -0500

Changed in clamav:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.