[pkg-apparmor] [Pkg-clamav-devel] Bug#913020: clamd: apparmor denials: cap net_admin, openssl.conf

[Christian Boltz]

Hello,

I wouldn't be surprised if capability net_admin is triggered by 
https://bugzilla.opensuse.org/show_bug.cgi?id=991901 (which turned out 
to be an upstream systemd bug) and fixed by 
https://github.com/systemd/systemd/pull/10085

I'd recommend to ask the systemd maintainers to apply/backport that 
patch - it will help to avoid "capability net_admin" requests in several 
daemons (bassically all that use libsystemd sd_notifyf() etc.)


Regards,

Christian Boltz
-- 
<cboltz> can you please add a safety check to make sure this doesn't
         happen again?
<cboltz> (for example: the file must have at least 100 lines)
<darix> cboltz: that check was in place
<darix> error page was long enough
[from #opensuse-admin]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20181111/9a7a613f/attachment.sig>