diff -u clamav-0.94.dfsg.2/debian/usr.bin.freshclam clamav-0.94.dfsg.2/debian/usr.bin.freshclam --- clamav-0.94.dfsg.2/debian/usr.bin.freshclam +++ clamav-0.94.dfsg.2/debian/usr.bin.freshclam @@ -7,6 +7,7 @@ /usr/bin/freshclam { #include #include + #include capability setgid, capability setuid, @@ -17,6 +18,13 @@ /etc/clamav/onupdateexecute.d/* mr, /etc/clamav/virusevent.d/* mr, + owner @{HOME}/.clamtk/db/daily.cld r, + owner @{HOME}/.clamtk/db/freshclam.log wk, + owner @{HOME}/.clamtk/db/main.cld r, + + owner @{HOME}/.klamav/database/ rw, + owner @{HOME}/.klamav/database/** rwk, + /usr/bin/freshclam mr, /var/lib/clamav/ r, @@ -27,2 +35,4 @@ /var/run/clamav/clamd.ctl w, + + deny /var/run/samba/gencache.tdb mrwkl, } diff -u clamav-0.94.dfsg.2/debian/changelog clamav-0.94.dfsg.2/debian/changelog --- clamav-0.94.dfsg.2/debian/changelog +++ clamav-0.94.dfsg.2/debian/changelog @@ -1,3 +1,13 @@ +clamav (0.94.dfsg.2-1ubuntu0.4) intrepid-proposed; urgency=low + + [ Scott Kitterman ] + * Update apparmor profiles (LP: #312695, #310737, #346397) + + [ Jamie Strandboge ] + * fix freshclam apparmor profile for klamav (LP: #359301) + + -- Jamie Strandboge Mon, 13 Apr 2009 12:53:24 -0500 + clamav (0.94.dfsg.2-1ubuntu0.3) intrepid-security; urgency=high * SECURITY UPDATE: (LP: #360502)