2
# Author: Jamie Strandboge <jamie@ubuntu.com>
3
# Last Modified: Sun Aug 3 09:39:03 2008
5
#include <tunables/global>
8
#include <abstractions/base>
9
#include <abstractions/nameservice>
12
capability dac_override,
14
# needed, when using systemd
18
@{PROC}/filesystems r,
19
@{PROC}/[0-9]*/status r,
21
/etc/clamav/clamd.conf r,
29
/var/lib/clamav/** krw,
30
/var/log/clamav/* krw,
32
/{,var/}run/clamav/clamd.ctl w,
33
/{,var/}run/clamav/clamd.pid w,
35
/var/spool/clamsmtp/* r,
37
/var/spool/qpsmtpd/* r,
39
/var/spool/p3scan/children/** r,
43
# For amavisd-new integration
44
/var/lib/amavis/tmp/** r,
46
# For mimedefang integration
47
/var/spool/MIMEDefang/mdefang-*/Work/ r,
48
/var/spool/MIMEDefang/mdefang-*/Work/** r,
51
/var/spool/exim4/** r,
53
# Allow home dir to be scanned
57
/etc/ldap/ldap.conf r,
59
# Site-specific additions and overrides. See local/README for details.
60
#include <local/usr.sbin.clamd>