<br><div class="gmail_quote">On 8 February 2012 13:03, Jules <span dir="ltr"><<a href="mailto:Jules@zend.to">Jules@zend.to</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
The file /etc/apparmor.d/local/usr.sbin.clamd should contain the
line<br>
/var/zendto/** r,<br>
which should be all you need, unless you've moved the library or
anything from their default locations under /var/zendto.<br>
<br>
Something must be wrong in your settings for clamd to be trying to
virus-scan /opt/zendto/www, it only ever scans files under
/var/zendto.<br>
If you have put your library under /opt/zendto/www then you need to
add<br>
/opt/zendto/www/** r,<br>
to the end of the file and restart apparmor with<br>
/etc/init.d/apparmor restart<br>
and then it should work.<br>
<br>
Jules.<div><div class="h5"><br>
<br>
On 08/02/2012 09:54, Nigel Kendrick wrote:
</div></div><blockquote type="cite"><div><div class="h5">Post update I now have the library feature, but if I
choose a file from it I get an error:<br>
<br>
Upload Error The attempt to virus-scan your drop-off failed.
Please contact your administrator for assistance.<br>
<br>
Uploading files as before still works fine though.<br>
<br>
System log includes:<br>
<br>
Feb 7 17:29:25 asltux13 kernel: [7100015.431439] type=1400
audit(1328635765.243:25): apparmor="DENIED" operation="open"
parent=1 profile="/usr/sbin/clamd" name="/opt/zendto/www/"
pid=29769 comm="clamd" requested_mask="r" denied_mask="r"
fsuid=109 ouid=0<br>
Feb 7 17:33:50 asltux13 kernel: [7100280.365885] type=1400
audit(1328636030.179:26): apparmor="DENIED" operation="open"
parent=1 profile="/usr/sbin/clamd" name="/opt/zendto/www/"
pid=29791 comm="clamd" requested_mask="r" denied_mask="r"
fsuid=109 ouid=0<br>
<br>
I tried adding the following to /etc/apparmor.d/usr.sbin.clamd:<br>
<br>
/opt/zendto/www/** kr,<br>
/var/zendto/library/** kr,<br>
<br>
and restarted apparmor (and tried a reboot) but no joy.<br>
<br></div></div></blockquote></div></blockquote><div>Feb 8 14:19:33 asltux13 kernel: [16022.897940] type=1400 audit(1328710773.294:14): apparmor="STATUS" operation="profile_replace" name="/usr/bin/freshclam" pid=2268 comm="apparmor_parser"<br>
Feb 8 14:19:33 asltux13 kernel: [16023.175803] type=1400 audit(1328710773.570:15): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=2267 comm="apparmor_parser"<br>
Feb 8 14:19:33 asltux13 kernel: [16023.176049] type=1400 audit(1328710773.574:16): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=2267 comm="apparmor_parser"<br>
Feb 8 14:19:33 asltux13 kernel: [16023.176201] type=1400 audit(1328710773.574:17): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=2267 comm="apparmor_parser"<br>
Feb 8 14:19:33 asltux13 kernel: [16023.231611] type=1400 audit(1328710773.626:18): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/clamd" pid=2269 comm="apparmor_parser"<br>
Feb 8 14:19:33 asltux13 kernel: [16023.526045] type=1400 audit(1328710773.922:19): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/mysqld" pid=2270 comm="apparmor_parser"<br>
Feb 8 14:19:34 asltux13 kernel: [16023.636365] type=1400 audit(1328710774.034:20): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/tcpdump" pid=2271 comm="apparmor_parser"<br>
Feb 8 14:20:28 asltux13 kernel: [16077.702097] type=1400 audit(1328710828.098:21): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/clamd" name="/opt/zendto/www/" pid=2302 comm="clamd" requested_mask="r" denied_mask="r" fsuid=109 ouid=0<br>
</div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="#FFFFFF" text="#000000"><blockquote type="cite"><div><div class="h5">
Any ideas?<br>
<br>
Ta<br>
<br></div></div></blockquote></div></blockquote></div><br><br>Hi Jules,<br>
<br>
Just a straight, 64-bit (apt) initial install of 4.06, recently upgraded
to 4.08. No defaults changed so the library is in /var/zendto.<br>
<br>
I've left the following in usr.sbin.clamd<br>
<br>
/opt/zendto/www/** r,<br>
/var/zendto/** r,<br>
<br>
No luck:<br><br><br>