| Path : /etc/apparmor.d/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : //etc/apparmor.d/usr.bin.freshclam |
# vim:syntax=apparmor
# Author: Jamie Strandboge <jamie@ubuntu.com>
# Last Modified: Sun Aug 3 09:39:03 2008
#include <tunables/global>
/usr/bin/freshclam flags=(attach_disconnected) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
#include <abstractions/openssl>
capability dac_override,
capability chown,
capability setgid,
capability setuid,
@{PROC}/filesystems r,
owner @{PROC}/[0-9]*/status r,
/etc/clamav/certs/{,*} r,
/etc/clamav/clamd.conf r,
/etc/clamav/freshclam.conf r,
/etc/clamav/onerrorexecute.d/* mr,
/etc/clamav/onupdateexecute.d/* mr,
/etc/clamav/virusevent.d/* mr,
owner @{HOME}/.clamtk/db/ rw,
owner @{HOME}/.clamtk/db/** rwk,
owner @{HOME}/.klamav/database/ rw,
owner @{HOME}/.klamav/database/** rwk,
/usr/bin/freshclam mr,
/var/lib/clamav/ r,
/var/lib/clamav/** krw,
/var/log/clamav/* krw,
/{,var/}run/clamav/freshclam.pid w,
/{,var/}run/clamav/clamd.ctl rw,
deny /{,var/}run/samba/{gencache,unexpected}.tdb mrwkl,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.freshclam>
}