make clamav read-only

Signed-off-by: Simon L <szaimen@e.mail.de>
2026-05-21 10:50:10 +00:00 · 2023-06-19 14:44:06 +02:00
parent 680dbc5432
commit 2e87b41672
2 changed files with 7 additions and 1 deletions
--- a/Containers/clamav/Dockerfile
+++ b/Containers/clamav/Dockerfile
@@ -9,7 +9,7 @@ RUN set -ex; \
    rm /tmp/clamav.conf; \
    mkdir -p /var/run/clamav /run/lock; \
    chown -R clamav:clamav /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock; \
-    chmod 770 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock
+    chmod 777 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock /tmp

 VOLUME /var/lib/clamav

--- a/php/containers.json
+++ b/php/containers.json
@@ -476,6 +476,12 @@
      ],
      "networks": [
        "nextcloud-aio"
+      ],
+      "read_only": true,
+      "tmpfs": [
+        "/var/lock",
+        "/var/log/clamav",
+        "/tmp"
      ]
    },
    {