[ZendTo] Re: Upgrading ZendTo (Ubuntu 64-bit, apt-get)

[Nigel Kendrick]

On 8 February 2012 13:03, Jules <Jules at zend.to> wrote:

>  The file /etc/apparmor.d/local/usr.sbin.clamd should contain the line
> /var/zendto/** r,
> which should be all you need, unless you've moved the library or anything
> from their default locations under /var/zendto.
>
> Something must be wrong in your settings for clamd to be trying to
> virus-scan /opt/zendto/www, it only ever scans files under /var/zendto.
> If you have put your library under /opt/zendto/www then you need to add
> /opt/zendto/www/** r,
> to the end of the file and restart apparmor with
>     /etc/init.d/apparmor restart
> and then it should work.
>
> Jules.
>
>
> On 08/02/2012 09:54, Nigel Kendrick wrote:
>
> Post update I now have the library feature, but if I choose a file from it
> I get an error:
>
> Upload Error The attempt to virus-scan your drop-off failed. Please
> contact your administrator for assistance.
>
> Uploading files as before still works fine though.
>
> System log includes:
>
> Feb  7 17:29:25 asltux13 kernel: [7100015.431439] type=1400
> audit(1328635765.243:25): apparmor="DENIED" operation="open" parent=1
> profile="/usr/sbin/clamd" name="/opt/zendto/www/" pid=29769 comm="clamd"
> requested_mask="r" denied_mask="r" fsuid=109 ouid=0
> Feb  7 17:33:50 asltux13 kernel: [7100280.365885] type=1400
> audit(1328636030.179:26): apparmor="DENIED" operation="open" parent=1
> profile="/usr/sbin/clamd" name="/opt/zendto/www/" pid=29791 comm="clamd"
> requested_mask="r" denied_mask="r" fsuid=109 ouid=0
>
> I tried adding the following to /etc/apparmor.d/usr.sbin.clamd:
>
>   /opt/zendto/www/** kr,
>   /var/zendto/library/** kr,
>
> and restarted apparmor (and tried a reboot) but no joy.
>
> Feb  8 14:19:33 asltux13 kernel: [16022.897940] type=1400
audit(1328710773.294:14): apparmor="STATUS" operation="profile_replace"
name="/usr/bin/freshclam" pid=2268 comm="apparmor_parser"
Feb  8 14:19:33 asltux13 kernel: [16023.175803] type=1400
audit(1328710773.570:15): apparmor="STATUS" operation="profile_replace"
name="/sbin/dhclient" pid=2267 comm="apparmor_parser"
Feb  8 14:19:33 asltux13 kernel: [16023.176049] type=1400
audit(1328710773.574:16): apparmor="STATUS" operation="profile_replace"
name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=2267
comm="apparmor_parser"
Feb  8 14:19:33 asltux13 kernel: [16023.176201] type=1400
audit(1328710773.574:17): apparmor="STATUS" operation="profile_replace"
name="/usr/lib/connman/scripts/dhclient-script" pid=2267
comm="apparmor_parser"
Feb  8 14:19:33 asltux13 kernel: [16023.231611] type=1400
audit(1328710773.626:18): apparmor="STATUS" operation="profile_replace"
name="/usr/sbin/clamd" pid=2269 comm="apparmor_parser"
Feb  8 14:19:33 asltux13 kernel: [16023.526045] type=1400
audit(1328710773.922:19): apparmor="STATUS" operation="profile_replace"
name="/usr/sbin/mysqld" pid=2270 comm="apparmor_parser"
Feb  8 14:19:34 asltux13 kernel: [16023.636365] type=1400
audit(1328710774.034:20): apparmor="STATUS" operation="profile_replace"
name="/usr/sbin/tcpdump" pid=2271 comm="apparmor_parser"
Feb  8 14:20:28 asltux13 kernel: [16077.702097] type=1400
audit(1328710828.098:21): apparmor="DENIED" operation="open" parent=1
profile="/usr/sbin/clamd" name="/opt/zendto/www/" pid=2302 comm="clamd"
requested_mask="r" denied_mask="r" fsuid=109 ouid=0


> Any ideas?
>
> Ta
>
>
>

Hi Jules,

Just a straight, 64-bit (apt) initial install of 4.06, recently upgraded to
4.08. No defaults changed so the library is in /var/zendto.

I've left the following in usr.sbin.clamd

  /opt/zendto/www/** r,
  /var/zendto/** r,

No luck:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20120208/8e945861/attachment-0001.html