[Pkg-clamav-devel] Bug#904111: Bug#904111: clamav-daemon causing deadlocks/blocking I/O

[Marc Dequènes (duck)]

Quack,

On 2018-07-24 15:18, Sebastian Andrzej Siewior wrote:
> On 2018-07-23 17:54:44 [+0900], Marc Dequènes wrote:
>> Quack,
> Hi,
> 
>> I just upgraded and cannot reproduce this problem. I'm not using the
>> ScanOnAccess feature.
> 
> just to confirm: you can not reproduce the problem.

I did not try to switch on ScanOnAccess on my production system, but 
with my configuration, which is not that different, I do not have the 
problem.

I just tried loading Adam's configuration on another system to test the 
ScanOnAccess, copied a clamav test file in one of the protected 
directory and hit the problem. After that the whole machine becomes 
totally unresponsive in a few seconds.

Jul 25 11:35:14 elwing kernel: [3112805.231170] clamd (13840): Using 
fanotify permission checks may lead to deadlock; tainting kernel
Jul 25 11:36:24 elwing kernel: [3112875.408154] kauditd_printk_skb: 7 
callbacks suppressed
Jul 25 11:36:24 elwing kernel: [3112875.408155] audit: type=1400 
audit(1532486184.205:794): apparmor="ALLOWED" operation="capable" 
profile="/usr/sbin/clamd" pid=13564 comm="clamd" capability=2  
capname="dac_read_search"
Jul 25 11:38:37 elwing kernel: [3113009.136000] INFO: task nfsd:20284 
blocked for more than 120 seconds.

I am using kernel 4.16.16-2~bpo9+1 on this machine.

\_o<

-- 
Marc Dequènes