[ZendTo] Debian Buster, apparmor and clamd

[Kevin Miller]

I haven’t gotten back to playing around with this (just turned apparmor off for now) but one thing I did discover is that the “#” in front of include statements doesn’t turn it into a comment.  See https://gitlab.com/apparmor/apparmor/-/wikis/QuickProfileLanguage
Kind of goofy that they did it that way, but it is what it is I suppose.


...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

From: ZendTo <zendto-bounces at zend.to> On Behalf Of Matthieu Froment via ZendTo
Sent: Sunday, December 29, 2019 6:51 AM
To: zendto at zend.to
Cc: Matthieu Froment <thieume at mailoo.org>
Subject: [ZendTo] Debian Buster, apparmor and clamd

EXTERNAL E-MAIL: BE CAUTIOUS WHEN OPENING FILES OR FOLLOWING LINKS
________________________________

Dear all,

I have freshly subscribed to this mailing list and I am a really newbie with Zendto. I live in France and I am not totally new with Linux.

I have installed an instance of Zendto on a Debian Buster server and I have the same problem as Kevin (recently answered by Jules) :

> AVC apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/clamd" name="var/zendto/incoming/phpW7ZXiQ" pid=469 comm="clamd" requested_mask="r" denied_mask="r" fsuid=107 ouid=33
> clamd[469]: Sun Dec 29 16:18:16 2019 -> fd[10]: Not a regular file. ERROR

- I have tried to purge the apparmor cache as requested but without any success.
- The upload works fine if I put in my preferences.php file the line : '/usr/bin/clamscan --s'
- I have checked that in my '/etc/apparmor.d/usr.sbin.clamd' file the 'include <local/usr.sbin.clamd>' is not commented (I had to remove the #).
- In /etc/apparmor.d/local/usr.sbin.clamd, I have the entry : '/var/zendto/** r,' which seems to be correct.

I'm stuck. Any idea where I can look for ?

Many thanks
Matthieu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20191230/3e98cf60/attachment-0001.html>