Strange issue with ClamAV plugin - 6.3.7-5 (Shaitan)

Every once in a while I perform an Rsync from my PC to the NAS - recently, the rsync hangs - which I troubleshooted down to having to turn off the ClamAV antivirus service - then the Rsync work fine ?!? All I could find is many entries in the messages log with this:

kernel: [62960.500340] audit: type=1400 audit(1680765734.130:972574): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/clamd" name="srv/dev-disk-by-uuid-9ce30a5a-80c0-40ef-9fee-1c8608334b5a/Backup/FoxLT5/ETL_Unternehmensportraet_2022_DE.html" pid=846 comm="clamd" requested_mask="r" denied_mask="r" fsuid=113 ouid=1000

What could this be?!? Any help would be welcome . . .

Thx,

R.Fox

Bump?!?

Quote from chente

Do you have apparmor installed?

I never installed apparmor myself - FYI, this machine was updated to OMV 6 from 5 many moons ago . . . just been applying the normal updates as they appeared over time . . . Not really sure this issue is an apparmor issue - but that's what I found in the logs

My question would be - is apparmor standard in the normal installation? I have read in this forum there are issue with docker and apparmor - but nothing about ClamAV ?!?

I have since de-installed the ClamAV plugin and re-installed it - will see if that helps.

Quote from chente

No.

This thread explains the problem. docker not working since omv-upgrade

The recommended general solution was to disable apparmor in grub. It is not recommended to have apparmor installed on OMV.

There are users who chose to install apparmor to resolve the issue despite the recommendation against it.

So when I saw that in your logs I thought that this could be the case and the origin of your problems.

Understood - funny enough - I checked, and apparmor packages are installed - although I don't recall installing them myself . . . and i checked - it is enabled ?!? Is there any harm in de-installing it or disabling it? Thx