ClamAV apparmor profile should allow clamav to read amavis's tmp

[Ante Karamatić]

Binary package hint: clamav

When clamav is used as anti-virus daemon for amavisd-new, it needs to be able to rad /var/lib/amavis/tmp/** directory. At the moment it's apparmor profile doesn't cover that use case. Adding:

/var/lib/amavis/tmp/** r,

to apparmor profile would solve the issue. Maybe even check in postinst if amavis group exist, and add clamav user to it automatically :/

[Scott Kitterman (kitterman)]

I don't think we can do that automatic user addition to the group because that would introduce a requirement for amavisd to be configured before clamav install.

I'll upload the apparmor profile after beta is released.

[Ante Karamatić (ivoks)]

On Wed, 01 Oct 2008 20:15:03 -0000
Scott Kitterman <email address hidden> wrote:

> I don't think we can do that automatic user addition to the group
> because that would introduce a requirement for amavisd to be
> configured before clamav install.

Well, not if we check it first:

grep -q amavis /etc/group
if [ $? -eq 0 ]; then
 adduser clamav amavis
fi

:)

[Scott Kitterman (kitterman)]

True, but then it'll work sometimes an not others and so the docs would have
to say "It may get done automagically, but if not check and do it manually."

[Launchpad Janitor (janitor)]

This bug was fixed in the package clamav - 0.94.dfsg-1ubuntu2

---------------
clamav (0.94.dfsg-1ubuntu2) intrepid; urgency=low

  * Update apparmor profile based on test feedback (LP: #276865)
    -Thanks to Ante Karamatić for the change

 -- Scott Kitterman <email address hidden> Thu, 02 Oct 2008 16:23:17 -0400