update freshclam profile

freshclam needs to write more files in /var/lib/clamav/, and also needs
to write its pid file.

PR: https://gitlab.com/apparmor/apparmor/merge_requests/381
Signed-off-by: Christian Boltz <apparmor@cboltz.de>
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
Christian Boltz 2019-05-12 17:22:18 +02:00 committed by John Johansen
parent 9144e39d25
commit c866bc276b

View file

@ -1,6 +1,7 @@
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
# Copyright (C) 2019 Christian Boltz
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
@ -21,7 +22,7 @@
/etc/clamd.conf r,
/etc/freshclam.conf r,
/usr/bin/freshclam mr,
/var/lib/clamav/clamav-* rw,
/var/lib/clamav/daily.cvd rw,
/var/lib/clamav/main.cvd rw,
/var/lib/clamav/** rw,
owner /run/clamav/freshclam.pid w,
}