cut and paste of the above file
# vim:syntax=apparmor # Author: Jamie Strandboge <email address hidden> # Last Modified: Sun Aug 3 09:39:03 2008
#include <tunables/global>
/usr/bin/freshclam { #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp>
capability setgid, capability setuid,
@{PROC}/filesystems r, owner @{PROC}/[0-9]*/status r,
/etc/clamav/clamd.conf r, /etc/clamav/freshclam.conf r, /etc/clamav/onerrorexecute.d/* mr, /etc/clamav/onupdateexecute.d/* mr, /etc/clamav/virusevent.d/* mr,
owner @{HOME}/.clamtk/db/ rw, owner @{HOME}/.clamtk/db/** rwk,
owner @{HOME}/.klamav/database/ rw, owner @{HOME}/.klamav/database/** rwk,
/usr/bin/freshclam mr,
/var/lib/clamav/ r, /var/lib/clamav/** krw,
/var/log/clamav/* kw, /var/run/clamav/freshclam.pid w, /var/run/clamav/clamd.ctl w,
# Site-specific additions and overrides. See local/README for details. #include <local/usr.bin.freshclam> }
cut and paste of the above file
# vim:syntax=apparmor
# Author: Jamie Strandboge <email address hidden>
# Last Modified: Sun Aug 3 09:39:03 2008
#include <tunables/global>
/usr/bin/freshclam { nameservice> user-tmp>
#include <abstractions/base>
#include <abstractions/
#include <abstractions/
capability setgid,
capability setuid,
@{PROC} /filesystems r, /[0-9]* /status r,
owner @{PROC}
/etc/ clamav/ clamd.conf r, clamav/ freshclam. conf r, clamav/ onerrorexecute. d/* mr, clamav/ onupdateexecute .d/* mr, clamav/ virusevent. d/* mr,
/etc/
/etc/
/etc/
/etc/
owner @{HOME}/.clamtk/db/ rw, /.clamtk/ db/** rwk,
owner @{HOME}
owner @{HOME} /.klamav/ database/ rw, /.klamav/ database/ ** rwk,
owner @{HOME}
/usr/ bin/freshclam mr,
/var/lib/clamav/ r, lib/clamav/ ** krw,
/var/
/var/log/clamav/* kw, run/clamav/ freshclam. pid w, run/clamav/ clamd.ctl w,
/var/
/var/
# Site-specific additions and overrides. See local/README for details. usr.bin. freshclam>
#include <local/
}