some further info:
I now have installed auditd to have the log in /var/log/audit/audit.log.
I added to usr.bin.clamd:
capability setgid,
capability setuid,
and used aa-logprof to add some more items:
capability chown,
capability dac_override,
capability fsetid,
capability sys_admin,
But, after reload apparmor, aa-enforce clamd, and restart clamd
I still have "ERROR: initgroups() failed" at clamd start.
It still needs aa-complain clamd to successfully start clamd
some further info: audit/audit. log.
I now have installed auditd to have the log in /var/log/
I added to usr.bin.clamd:
capability setgid,
capability setuid,
and used aa-logprof to add some more items:
capability chown,
capability dac_override,
capability fsetid,
capability sys_admin,
But, after reload apparmor, aa-enforce clamd, and restart clamd
I still have "ERROR: initgroups() failed" at clamd start.
It still needs aa-complain clamd to successfully start clamd