[SOLVED] freshclam-observer Permission denied

[Joeg1484]

Hi All,

I was poking around on the server today and noticed some e-mail to clamav dating back to March 21st that had this message in it:

Code: [Select]

sh: 1: /usr/share/zentyal-antivirus/freshclam-observer: Permission denied

I took a look at the apt history and noticed on that day, this update:

Code: [Select]

Start-Date: 2013-03-21  07:52:27
Commandline: apt-get upgrade
Upgrade: clamav:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), zentyal-monitor:amd64 (3.0.2, 3.0.3), clamav-base:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), libclamav6:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), zentyal-users:amd64 (3.0.12, 3.0.13), udev:amd64 (175-0ubuntu9.2, 175-0ubuntu9.3), libudev0:amd64 (175-0ubuntu9.2, 175-0ubuntu9.3), clamav-freshclam:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), clamav-daemon:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), iptables:amd64 (1.4.12-1ubuntu4+zentyal1, 1.4.12-1ubuntu5), zentyal-core:amd64 (3.0.16, 3.0.17)
End-Date: 2013-03-21  07:53:46

Is this something I should put a bug report in for or is there a quick and simple fix?

Oh, and btw:

Code: [Select]

Last Status:
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.97.7 Recommended version: 0.97.8
    DON'T PANIC! Read http://www.clamav.net/support/faq
    main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
    daily.cld is up to date (version: 17110, sigs: 1166542, f-level: 63, builder: neo)
    bytecode.cvd is up to date (version: 214, sigs: 41, f-level: 63, builder: neo)

Thanks!
Joe

[Sam Graf]

Is this something I should put a bug report in for or is there a quick and simple fix?

Maybe neither.

http://forum.zentyal.org/index.php/topic,13338.msg55164.html#msg55164

Unfortuantely the only bug report I could find isn't directly addressing your problem (and the dates seem wrong), so I'm not sure what bug the above topic refers to.

[Joeg1484]

Hi Sam,

Yeah, I saw that too and it seemed a bit vague (Even after I put it into translate mode :-D.)

I have seen where freshclam would get permission issues when using the clamav PPA, but that was usually a quick permissions fix for the run files, however, this looks deeper into the Zentyal scripts specifically.

Perhaps I will put in a bug report and see where it goes.

Thanks for the reply!
Joe

[Sam Graf]

I should have mentioned this before, though not sure if it's related to your experience:

http://forum.zentyal.org/index.php?topic=5792.0

[Joeg1484]

Hi Sam,

I took a look at the kern.log and didn't see these error there, but I can add the bits like they did in the other thread to see if that helps.

Thanks!
Joe

[Joeg1484]

Actually, I don't apparmor installed or even running, so its probably not that

[biyover]

Did anyone get any further with this?

I believe it's something to do with the called script (/usr/share/zentyal-antivirus/freshclam-observer). If you look in that file, it seems to be the one that links the actual updating mechanism with the zentyal web-gui, so that it reads "up to date" or similar.

Now, which permissions does it refer to? The permissions of the file don't allow freshclam to run it? OR the script does not allow itself to be run by the clam user? I ask, because frechclam-observer contains a user check code.

Any Zentyal admin in the know?

[Joeg1484]

I haven't received any update from anyone, however, I do have a bug report for it if you want to chime in there too:

#6621: freshclam-observer Permission denied after update
http://trac.zentyal.org/ticket/6621

Thanks!
Joe

[biyover]

I'll look at that.... but today there was an update to the zentyal-clamav module and it seems to fix the issue.

I'm running zentyal 3 BTW.

Cheers

[nontrivial]

As far as I know this has been an issue since Zentyal 3.0 was released. When I stand up a new server, it's just part of my checklist to "sudo chmod 755 /usr/share/zentyal-antivirus/freshclam-observer".

James

[Joeg1484]

As far as I know this has been an issue since Zentyal 3.0 was released. When I stand up a new server, it's just part of my checklist to "sudo chmod 755 /usr/share/zentyal-antivirus/freshclam-observer".

James

Ooohh, ok, didn't think about trying that .

Anytime there is an issue with Zentyal specific items, I always post here or a bug report... General Linux issues, yeah, I'll hack around

Thanks!

[Joeg1484]

I'll look at that.... but today there was an update to the zentyal-clamav module and it seems to fix the issue.

I'm running zentyal 3 BTW.

Cheers

Cool, just upgraded... We will see what happens...

Thanks!
Joe

[Joeg1484]

Well, after the upgrade and checking e-mail all day, I have to say that I think this is fixed

Thanks!
Joe