Aug 19 22:29:44 utest-oos32 mimedefang.pl[19942]: Discarding because of virus Eicar-Test-Signature
Aug 19 22:29:44 utest-oos32 mimedefang.pl[19942]: filter: p7JJThfN020084: discard=1
Aug 19 22:29:44 utest-oos32 mimedefang[19941]: p7JJThfN020084: Discarding because filter instructed us to
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: Milter: data, discard
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: discarded
Tested and working with your more restrictive version
root@utest- oos32:/ etc/mail# cat /etc/apparmor. d/usr.sbin. clamd | grep -i mimedefang spool/MIMEDefan g/mdefang- */Work/ r, spool/MIMEDefan g/mdefang- */Work/ ** r,
# For mimedefang integration
/var/
/var/
Aug 19 22:29:29 utest-oos32 kernel: [ 9102.069911] type=1400 audit(131378216 9.299:29) : apparmor="STATUS" operation= "profile_ replace" name="/ usr/sbin/ clamd" pid=20079 comm="apparmor_ parser"
Aug 19 22:29:44 utest-oos32 mimedefang. pl[19942] : Discarding because of virus Eicar-Test- Signature pl[19942] : filter: p7JJThfN020084: discard=1
Aug 19 22:29:44 utest-oos32 mimedefang.
Aug 19 22:29:44 utest-oos32 mimedefang[19941]: p7JJThfN020084: Discarding because filter instructed us to
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: Milter: data, discard
Aug 19 22:29:44 utest-oos32 sm-mta[20084]: p7JJThfN020084: discarded
Patch against apparmor profile attached.