[Bug 829089] Re: clamd scanning mimedefang temp files blocked by apparmor

[Imre Gergely]

Tested and working with your more restrictive version

root at utest-oos32:/etc/mail# cat /etc/apparmor.d/usr.sbin.clamd | grep -i mimedefang
  # For mimedefang integration
  /var/spool/MIMEDefang/mdefang-*/Work/ r,
  /var/spool/MIMEDefang/mdefang-*/Work/** r,

Aug 19 22:29:29 utest-oos32 kernel: [ 9102.069911] type=1400
audit(1313782169.299:29): apparmor="STATUS" operation="profile_replace"
name="/usr/sbin/clamd" pid=20079 comm="apparmor_parser"

Aug 19 22:29:44 utest-oos32 mimedefang.pl[19942]: Discarding because of virus Eicar-Test-Signature
Aug 19 22:29:44 utest-oos32 mimedefang.pl[19942]: filter: p7JJThfN020084:  discard=1
Aug 19 22:29:44 utest-oos32 mimedefang[19941]: p7JJThfN020084: Discarding because filter instructed us to
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: Milter: data, discard
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: discarded

Patch against apparmor profile attached.

** Patch added: "usr.sbin.clamd-oneiric.diff"
   https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/829089/+attachment/2292899/+files/usr.sbin.clamd-oneiric.diff

** Changed in: clamav (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in Ubuntu.
https://bugs.launchpad.net/bugs/829089

Title:
  clamd scanning mimedefang temp files blocked by apparmor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/829089/+subscriptions