[apparmor] apparmor & clamav

[Seth Arnold]

On Wed, Sep 04, 2019 at 08:02:56PM +0200, Birger Birger wrote:
> This looks promising to troubleshoot. Any ideas?

Do you know what winbindd does with this pipe? Are there any local
configuration changes that would have put this pipe in this directory?

It feels a lot like a new name for the pipes listed in
<abstractions/winbind>:

  /tmp/.winbindd/pipe  rw,
  /var/{lib,run}/samba/winbindd_privileged/pipe rw,

Does this sound right? Or is this pipe something different from these?

Thanks

> > On Sep 4, 2019, at 03:01, Birger Birger via clamav-users <
> clamav-users at lists.clamav.net> wrote:
> >
> 
> From Ubuntu syslog:
> > Sep 4 08:40:01 zentyal kernel: [345190.998397] audit: type=1400
> audit(1567579201.044:83): apparmor="DENIED" operation="connect"
> profile="/usr/bin/freshclam" name="/run/samba/winbindd/pipe" pid=1269
> comm="freshclam" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20190904/5d9bcee7/attachment.sig>