diff --git a/clamav-milter.systemd b/clamav-milter.systemd index dc9a3f4..15aaa47 100644 --- a/clamav-milter.systemd +++ b/clamav-milter.systemd @@ -9,5 +9,17 @@ Type = simple ExecStart = /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf --nofork=yes Restart = on-failure +User=clamilt +Group=clamilt + +PrivateTmp=yes +PrivateDevices=yes +NoNewPrivileges=yes +CapabilityBoundingSet=CAP_KILL + +ReadOnlyDirectories=/etc +ReadOnlyDirectories=/usr +ReadOnlyDirectories=/var/lib + [Install] WantedBy = multi-user.target diff --git a/clamav.spec b/clamav.spec index ea85417..60016e2 100644 --- a/clamav.spec +++ b/clamav.spec @@ -58,7 +58,7 @@ Requires(postun): /bin/systemctl\ Summary: End-user tools for the Clam Antivirus scanner Name: clamav Version: 0.99 -Release: 1%{?dist} +Release: 2%{?dist} License: %{?with_unrar:proprietary}%{!?with_unrar:GPLv2} Group: Applications/File URL: http://www.clamav.net @@ -117,6 +117,7 @@ Group: Development/Libraries Source100: clamd-gen Requires: clamav-lib = %version-%release Requires: clamav-filesystem = %version-%release +Requires: openssl-devel %package data Summary: Virus signature data for the Clam Antivirus scanner @@ -891,6 +892,10 @@ test "$1" != "0" || /sbin/initctl -q stop clamav-milter || : %changelog +* Sun Dec 06 2015 Robert Scheck - 0.99-2 +- Require openssl-devel for clamav-devel +- Change clamav-milter unit for upstream changes (#1287795) + * Wed Dec 02 2015 Robert Scheck - 0.99-1 - Upgrade to 0.99 and updated daily.cvd (#1287327)