Ubuntu
clamav package

  1. Bug #655058
  2. Comment #3

Comment 3 for bug 655058

Revision history for this message
Martin West (martin-objectgizmos) wrote : Re: freshclam apparmour error : type=1502 operation="inode_permission" requested_mask="r::" denied_mask="r::" name="/proc/28071/status"

cut and paste of the above file

# vim:syntax=apparmor
# Author: Jamie Strandboge <email address hidden>
# Last Modified: Sun Aug 3 09:39:03 2008

#include <tunables/global>

/usr/bin/freshclam {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  capability setgid,
  capability setuid,

  @{PROC}/filesystems r,
  owner @{PROC}/[0-9]*/status r,

  /etc/clamav/clamd.conf r,
  /etc/clamav/freshclam.conf r,
  /etc/clamav/onerrorexecute.d/* mr,
  /etc/clamav/onupdateexecute.d/* mr,
  /etc/clamav/virusevent.d/* mr,

  owner @{HOME}/.clamtk/db/ rw,
  owner @{HOME}/.clamtk/db/** rwk,

  owner @{HOME}/.klamav/database/ rw,
  owner @{HOME}/.klamav/database/** rwk,

  /usr/bin/freshclam mr,

  /var/lib/clamav/ r,
  /var/lib/clamav/** krw,

  /var/log/clamav/* kw,
  /var/run/clamav/freshclam.pid w,
  /var/run/clamav/clamd.ctl w,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.bin.freshclam>
}