make clamav read-only

Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-06-19 14:44:06 +02:00
parent 680dbc5432
commit 2e87b41672
2 changed files with 7 additions and 1 deletions

View file

@ -9,7 +9,7 @@ RUN set -ex; \
rm /tmp/clamav.conf; \
mkdir -p /var/run/clamav /run/lock; \
chown -R clamav:clamav /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock; \
chmod 770 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock
chmod 777 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock /tmp
VOLUME /var/lib/clamav

View file

@ -476,6 +476,12 @@
],
"networks": [
"nextcloud-aio"
],
"read_only": true,
"tmpfs": [
"/var/lock",
"/var/log/clamav",
"/tmp"
]
},
{