[clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Chris-2
I was out of town last week and when I got home I noticed the above
while going through my hourly syslog snippets. The complete output can
be found here - https://pastebin.com/vyjqMJwb I've restarted freshclam
by running sudo /etc/init.d/clamav-freshclam and still the same
apparmor output. It's odd that this just started last Tuesday
especially since I'd been out of town since the day before .

I'm running Ubuntu 16.04.4, clamav 99.4. Asked already on the Clamav
list, was told I should ask here.


--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
12:29:20 up 8 days, 4:41, 1 user, load average: 1.60, 4.26, 5.66
Description: Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

signature.asc (188 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Chris-2
On Sun, 2018-06-24 at 12:31 -0500, Chris wrote:

> I was out of town last week and when I got home I noticed the above
> while going through my hourly syslog snippets. The complete output
> can
> be found here - https://pastebin.com/vyjqMJwb I've restarted
> freshclam
> by running sudo /etc/init.d/clamav-freshclam and still the same
> apparmor output. It's odd that this just started last Tuesday
> especially since I'd been out of town since the day before .
>
> I'm running Ubuntu 16.04.4, clamav 99.4. Asked already on the Clamav
> list, was told I should ask here.
>
>
I assume that since no one has replied to my question, not even to tell
me they have no idea, that it's not appropriate for this list.

--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
15:43:53 up 9 days, 7:56, 1 user, load average: 0.87, 1.19, 2.04
Description: Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

signature.asc (188 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Ian Bruntlett
Hi Chris,

On 25 June 2018 at 21:45, Chris <[hidden email]> wrote:
I assume that since no one has replied to my question, not even to tell
me they have no idea, that it's not appropriate for this list.

I have pretty much no experience in that. I was researching anti-virus programs to deal with a different problem and Clam AV got really bad reviews.

There are other anti-virus programs available for Linux.

HTH,


Ian

--
-- ACCU - Professionalism in programming - http://www.accu.org
-- My writing - https://sites.google.com/site/ianbruntlett/


--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Wade Smart-2
In reply to this post by Chris-2
1) This list has dropped from tens or more of posts per day to maybe a single
post every couple of days.

2) If someone sees it and has a response - they will respond.

3) If this list isnt helping there ARE other lists.

--
Registered Linux User: #480675
Registered Linux Machine: #408606
Linux since June 2005


On Mon, Jun 25, 2018 at 3:45 PM, Chris <[hidden email]> wrote:

> On Sun, 2018-06-24 at 12:31 -0500, Chris wrote:
>> I was out of town last week and when I got home I noticed the above
>> while going through my hourly syslog snippets. The complete output
>> can
>> be found here - https://pastebin.com/vyjqMJwb I've restarted
>> freshclam
>> by running sudo /etc/init.d/clamav-freshclam and still the same
>> apparmor output. It's odd that this just started last Tuesday
>> especially since I'd been out of town since the day before .
>>
>> I'm running Ubuntu 16.04.4, clamav 99.4. Asked already on the Clamav
>> list, was told I should ask here.
>>
>>
> I assume that since no one has replied to my question, not even to tell
> me they have no idea, that it's not appropriate for this list.
>
> --
> Chris
> KeyID 0xE372A7DA98E6705C
> 31.11972; -97.90167 (Elev. 1092 ft)
> 15:43:53 up 9 days, 7:56, 1 user, load average: 0.87, 1.19, 2.04
> Description:    Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic
>
> --
> ubuntu-users mailing list
> [hidden email]
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Liam Proven
In reply to this post by Chris-2
On Mon, 25 Jun 2018 at 22:46, Chris <[hidden email]> wrote:

> I assume that since no one has replied to my question, not even to tell
> me they have no idea, that it's not appropriate for this list.

No, it's appropriate. I assume nobody knows.

When I read it this morning, I had a quick look to see if anyone had
packaged ClamAV 1.0.0 for Ubuntu yet. I couldn't find one.

This being so, you might have to grab the tarball and build it
yourself to get around this, but I am just guessing.

--
Liam Proven - Profile: https://about.me/liamproven
Email: [hidden email] - Google Mail/Hangouts/Plus: [hidden email]
Twitter/Facebook/Flickr: lproven - Skype/LinkedIn: liamproven
UK: +44 7939-087884 - ČR (+ WhatsApp/Telegram/Signal): +420 702 829 053

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Chris-2
On Mon, 2018-06-25 at 23:26 +0200, Liam Proven wrote:
> On Mon, 25 Jun 2018 at 22:46, Chris <[hidden email]> wrote:
>
> >
> > I assume that since no one has replied to my question, not even to
> > tell
> > me they have no idea, that it's not appropriate for this list.
> No, it's appropriate. I assume nobody knows.

That's what I'd had to assume also Liam. I did ask over at
linuxquestions.org in the software forum awhile ago.

>
> When I read it this morning, I had a quick look to see if anyone had
> packaged ClamAV 1.0.0 for Ubuntu yet. I couldn't find one.
>
> This being so, you might have to grab the tarball and build it
> yourself to get around this, but I am just guessing.
>
Though I can't find the thread I started either here or on the ClamAv
list I was told that since .100 was not a security release that more
than likely the Ubuntu devs will wait to release a new version,
probably with the .101. version.

--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
16:41:11 up 9 days, 8:53, 1 user, load average: 1.69, 1.43, 1.67
Description: Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

signature.asc (188 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Wade Smart-2
https://www.mail-archive.com/clamav-users@.../msg45669.html

This is your post.
--
Registered Linux User: #480675
Registered Linux Machine: #408606
Linux since June 2005


On Mon, Jun 25, 2018 at 4:57 PM, Chris <[hidden email]> wrote:

> On Mon, 2018-06-25 at 23:26 +0200, Liam Proven wrote:
>> On Mon, 25 Jun 2018 at 22:46, Chris <[hidden email]> wrote:
>>
>> >
>> > I assume that since no one has replied to my question, not even to
>> > tell
>> > me they have no idea, that it's not appropriate for this list.
>> No, it's appropriate. I assume nobody knows.
>
> That's what I'd had to assume also Liam. I did ask over at
> linuxquestions.org in the software forum awhile ago.
>
>>
>> When I read it this morning, I had a quick look to see if anyone had
>> packaged ClamAV 1.0.0 for Ubuntu yet. I couldn't find one.
>>
>> This being so, you might have to grab the tarball and build it
>> yourself to get around this, but I am just guessing.
>>
> Though I can't find the thread I started either here or on the ClamAv
> list I was told that since .100 was not a security release that more
> than likely the Ubuntu devs will wait to release a new version,
> probably with the .101. version.
>
> --
> Chris
> KeyID 0xE372A7DA98E6705C
> 31.11972; -97.90167 (Elev. 1092 ft)
> 16:41:11 up 9 days, 8:53, 1 user, load average: 1.69, 1.43, 1.67
> Description:    Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic
>
> --
> ubuntu-users mailing list
> [hidden email]
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Chris-2
On Mon, 2018-06-25 at 17:17 -0500, Wade Smart wrote:
> https://www.mail-archive.com/clamav-users@.../msg45669.h
> tml
>
> This is your post.

Yes it is and note the reply from Scott Kitterman:

"You should consult an Ubuntu specific resource.  The apparmor profile
is not from upstream."

Not sure what you're getting at Wade since this is a Ubuntu specific
resource that I'm consulting.

--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
17:35:17 up 9 days, 9:47, 2 users, load average: 1.03, 4.56, 7.86
Description: Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

signature.asc (188 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Nils Kassube-2
Chris wrote:
> Yes it is and note the reply from Scott Kitterman:
>
> "You should consult an Ubuntu specific resource.  The apparmor profile
> is not from upstream."

For a shorttime fix of the problem, you could get familiar with apparmor
and edit the file "/etc/apparmor.d/usr.bin.freshclam". But the changes
would be gone after the next clamav update. I think, a better solution
would be to file a bugreport at <https://bugs.launchpad.net> to make the
Ubuntu developers aware of the problem. While there are probably some
developers reading this list, that doesn't mean that the one responsable
for clamav reads it.


Nils

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: [clamav-users] apparmor="DENIED" operation="rename_src" profile="/usr/bin/freshclam"

Chris-2
On Tue, 2018-06-26 at 06:09 +0200, Nils Kassube wrote:

> Chris wrote:
> >
> > Yes it is and note the reply from Scott Kitterman:
> >
> > "You should consult an Ubuntu specific resource.  The apparmor
> > profile
> > is not from upstream."
> For a shorttime fix of the problem, you could get familiar with
> apparmor 
> and edit the file "/etc/apparmor.d/usr.bin.freshclam". But the
> changes 
> would be gone after the next clamav update. I think, a better
> solution 
> would be to file a bugreport at <https://bugs.launchpad.net> to make
> the 
> Ubuntu developers aware of the problem. While there are probably
> some 
> developers reading this list, that doesn't mean that the one
> responsable 
> for clamav reads it.
>
Good idea Nils, I was actually lying in bed this morning thinking about
seeing if there are settings in apparmor that I can change. It's odd
that this just suddenly started last Tuesday. Filing a bug report is an
excellent idea if I can figure out the reason why this started.

Chris

--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
07:32:32 up 13:41, 1 user, load average: 0.29, 0.31, 0.19
Description: Ubuntu 16.04.4 LTS, kernel 4.13.0-45-generic

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

signature.asc (188 bytes) Download Attachment