Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: Joeg1484 on April 30, 2013, 04:09:20 am

Title: [SOLVED] freshclam-observer Permission denied
Post by: Joeg1484 on April 30, 2013, 04:09:20 am
Hi All,

I was poking around on the server today and noticed some e-mail to clamav dating back to March 21st that had this message in it:

Code: [Select]
sh: 1: /usr/share/zentyal-antivirus/freshclam-observer: Permission denied

I took a look at the apt history and noticed on that day, this update:

Code: [Select]
Start-Date: 2013-03-21  07:52:27
Commandline: apt-get upgrade
Upgrade: clamav:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), zentyal-monitor:amd64 (3.0.2, 3.0.3), clamav-base:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), libclamav6:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), zentyal-users:amd64 (3.0.12, 3.0.13), udev:amd64 (175-0ubuntu9.2, 175-0ubuntu9.3), libudev0:amd64 (175-0ubuntu9.2, 175-0ubuntu9.3), clamav-freshclam:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), clamav-daemon:amd64 (0.97.6+dfsg-1ubuntu0.12.04.1, 0.97.7+dfsg-1ubuntu0.12.04.1), iptables:amd64 (1.4.12-1ubuntu4+zentyal1, 1.4.12-1ubuntu5), zentyal-core:amd64 (3.0.16, 3.0.17)
End-Date: 2013-03-21  07:53:46

Is this something I should put a bug report in for or is there a quick and simple fix?

Oh, and btw:

Code: [Select]
Last Status:
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.97.7 Recommended version: 0.97.8
    DON'T PANIC! Read http://www.clamav.net/support/faq
    main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
    daily.cld is up to date (version: 17110, sigs: 1166542, f-level: 63, builder: neo)
    bytecode.cvd is up to date (version: 214, sigs: 41, f-level: 63, builder: neo)

Thanks!
Joe
Title: Re: freshclam-observer Permission denied
Post by: Sam Graf on April 30, 2013, 05:01:02 pm
Quote from: Joeg1484 on April 30, 2013, 04:09:20 am
Is this something I should put a bug report in for or is there a quick and simple fix?

Maybe neither. :-\

http://forum.zentyal.org/index.php/topic,13338.msg55164.html#msg55164

Unfortuantely the only bug report I could find isn't directly addressing your problem (and the dates seem wrong), so I'm not sure what bug the above topic refers to.
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on April 30, 2013, 05:20:09 pm
Hi Sam,

Yeah, I saw that too and it seemed a bit vague (Even after I put it into translate mode :-D.)

I have seen where freshclam would get permission issues when using the clamav PPA, but that was usually a quick permissions fix for the run files, however, this looks deeper into the Zentyal scripts specifically.

Perhaps I will put in a bug report and see where it goes.

Thanks for the reply!
Joe
Title: Re: freshclam-observer Permission denied
Post by: Sam Graf on April 30, 2013, 05:32:25 pm
I should have mentioned this before, though not sure if it's related to your experience:

http://forum.zentyal.org/index.php?topic=5792.0
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on April 30, 2013, 05:36:06 pm
Hi Sam,

I took a look at the kern.log and didn't see these error there, but I can add the bits like they did in the other thread to see if that helps.

Thanks!
Joe
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on April 30, 2013, 05:38:37 pm
Actually, I don't apparmor installed or even running, so its probably not that :)
Title: Re: freshclam-observer Permission denied
Post by: biyover on May 03, 2013, 02:06:54 am
Did anyone get any further with this?

I believe it's something to do with the called script (/usr/share/zentyal-antivirus/freshclam-observer). If you look in that file, it seems to be the one that links the actual updating mechanism with the zentyal web-gui, so that it reads "up to date" or similar.

Now, which permissions does it refer to? The permissions of the file don't allow freshclam to run it? OR the script does not allow itself to be run by the clam user? I ask, because frechclam-observer contains a user check code.

Any Zentyal admin in the know?
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on May 03, 2013, 05:43:33 am
I haven't received any update from anyone, however, I do have a bug report for it if you want to chime in there too:

#6621: freshclam-observer Permission denied after update
http://trac.zentyal.org/ticket/6621

Thanks!
Joe
Title: Re: freshclam-observer Permission denied
Post by: biyover on May 03, 2013, 04:25:03 pm
I'll look at that.... but today there was an update to the zentyal-clamav module and it seems to fix the issue.

I'm running zentyal 3 BTW.

Cheers
Title: Re: freshclam-observer Permission denied
Post by: nontrivial on May 03, 2013, 04:29:16 pm
As far as I know this has been an issue since Zentyal 3.0 was released. When I stand up a new server, it's just part of my checklist to "sudo chmod 755 /usr/share/zentyal-antivirus/freshclam-observer".

James
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on May 03, 2013, 06:25:09 pm
Quote from: nontrivial on May 03, 2013, 04:29:16 pm
As far as I know this has been an issue since Zentyal 3.0 was released. When I stand up a new server, it's just part of my checklist to "sudo chmod 755 /usr/share/zentyal-antivirus/freshclam-observer".

James

Ooohh, ok, didn't think about trying that :).

Anytime there is an issue with Zentyal specific items, I always post here or a bug report... General Linux issues, yeah, I'll hack around :)

Thanks!
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on May 03, 2013, 06:25:27 pm
Quote from: biyover on May 03, 2013, 04:25:03 pm
I'll look at that.... but today there was an update to the zentyal-clamav module and it seems to fix the issue.

I'm running zentyal 3 BTW.

Cheers

Cool, just upgraded... We will see what happens...

Thanks!
Joe
Title: Re: freshclam-observer Permission denied
Post by: Joeg1484 on May 04, 2013, 07:02:18 am
Well, after the upgrade and checking e-mail all day, I have to say that I think this is fixed :)

Thanks!
Joe