[Bug 310026] [NEW] apparmor complains as clam scans qpsmtpd message files

[glenstewart]

Public bug reported:

Binary package hint: qpsmtpd

Running Kubuntu Intrepid, using qpsmtpd .40 (as packaged for Intrepid),
with clam use enabled with:

virus/clamav clamscan_path=/usr/bin/clamdscan action=reject
max_size=2097152 tmp_dir=/home/tmp/qpsmtpd/tmp

The following log files, messages, kern.log, syslog, are rapidly filling
up with these two entry types:

[235335.535288] type=1502 audit(1229790513.700:11387):
operation="inode_permission" requested_mask="::r" denied_mask="::r"
fsuid=0 name="/var/spool/qpsmtpd/1229790513:24131:0" pid=24201
profile="/usr/sbin/clamd"

[237876.724843] type=1502 audit(1229793054.888:11477):
operation="capable" name="dac_override" pid=24842
profile="/usr/sbin/clamd"

I was able to suppress the inode_permission entry by adding this to
/etc/apparmor.d/usr.sbin.clamd:

  /var/spool/qpsmtpd/* r,

The qpsmtpd package should enter appropriate lines/files in
/etc/apparmor.d  in future releases.

** Affects: qpsmtpd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
apparmor complains as clam scans qpsmtpd message files
https://bugs.launchpad.net/bugs/310026
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs