committing changes in /etc made by "apt dist-upgrade -y"

Package changes:
-apt 1.8.2.2 amd64
+apt 1.8.2.3 amd64
-apt-transport-https 1.8.2.2 all
-apt-utils 1.8.2.2 amd64
+apt-transport-https 1.8.2.3 all
+apt-utils 1.8.2.3 amd64
-clamav-base 0.102.4+dfsg-0+deb10u1 all
-clamav-daemon 0.102.4+dfsg-0+deb10u1 amd64
-clamav-freshclam 0.102.4+dfsg-0+deb10u1 amd64
+clamav-base 0.103.2+dfsg-0+deb10u1 all
+clamav-daemon 0.103.2+dfsg-0+deb10u1 amd64
+clamav-freshclam 0.103.2+dfsg-0+deb10u1 amd64
-libapt-inst2.0 1.8.2.2 amd64
-libapt-pkg5.0 1.8.2.2 amd64
+libapt-inst2.0 1.8.2.3 amd64
+libapt-pkg5.0 1.8.2.3 amd64
-libclamav9 0.102.4+dfsg-0+deb10u1 amd64
+libclamav9 0.103.2+dfsg-0+deb10u1 amd64
-php-pear 1:1.10.6+submodules+notgz-1.1+deb10u1 all
+php-pear 1:1.10.6+submodules+notgz-1.1+deb10u2 all

diff --git a/apparmor.d/usr.bin.freshclam b/apparmor.d/usr.bin.freshclam
index df5cb5be72eb9d2a14d95785cfeb140c2ef8f67f..a00317e40e78cad438749bdcba5561a771cf8b66 100644 (file)
--- a/apparmor.d/usr.bin.freshclam
+++ b/apparmor.d/usr.bin.freshclam
@@ -10,6 +10,9 @@
   #include <abstractions/user-tmp>
   #include <abstractions/openssl>
 
+  capability dac_override,
+  capability chown,
+
   capability setgid,
   capability setuid,
 

diff --git a/apparmor.d/usr.sbin.clamd b/apparmor.d/usr.sbin.clamd
index 45447594c38aaa03f77b670036ebb5c77328975e..da2bed00075404688c7e0b4830225437b2385a22 100644 (file)
--- a/apparmor.d/usr.sbin.clamd
+++ b/apparmor.d/usr.sbin.clamd
@@ -15,6 +15,7 @@
   # needed, when using systemd
   capability setgid,
   capability setuid,
+  capability chown,
 
   @{PROC}/filesystems r,
   @{PROC}/[0-9]*/status r,

diff --git a/clamav/freshclam.conf b/clamav/freshclam.conf
index 565b2484a7a242f883b5bbfa21da6b7592204318..ed224cf5fc9b46ed02b806a816cf27690ed0753b 100644 (file)
--- a/clamav/freshclam.conf
+++ b/clamav/freshclam.conf
@@ -19,7 +19,6 @@ ReceiveTimeout 30
 TestDatabases yes
 ScriptedUpdates yes
 CompressLocalDatabase no
-SafeBrowsing false
 Bytecode true
 NotifyClamd /etc/clamav/clamd.conf
 # Check for new database 24 times a day