fixed permissions and log files for ClamAV

intelowlproject · Dec 27, 2023 · 0e85ad1 · 0e85ad1
1 parent 6494446
commit 0e85ad1
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 8 deletions.
diff --git a/integrations/malware_tools_analyzers/Dockerfile b/integrations/malware_tools_analyzers/Dockerfile
@@ -126,9 +126,10 @@ RUN chown -R ${USER}:${USER} ${PROJECT_PATH} \
 COPY clamav/etc/* /etc/clamav
 COPY clamav/sigs/* /var/lib/clamav
 # Permission juggling for ClamAV Analyzer
-RUN mkdir /var/run/clamav && \
-    chown ${USER}:${USER} /var/run/clamav && \
-    chmod 755 /var/run/clamav
+RUN mkdir -p /var/run/clamav ${LOG_PATH} ${LOG_PATH}/clamav&& \
+    touch ${LOG_PATH}/gunicorn_access.log ${LOG_PATH}/gunicorn_errors.log && \
+    chmod 755 /var/run/clamav && \
+    chown -R ${USER}:${USER} /var/run/clamav ${LOG_PATH}
 
 # Serve Flask application using gunicorn
 EXPOSE 4002

diff --git a/integrations/malware_tools_analyzers/clamav/etc/clamd.conf b/integrations/malware_tools_analyzers/clamav/etc/clamd.conf
@@ -15,7 +15,7 @@ LogRotate true
 LogFacility LOG_LOCAL6
 LogClean false
 LogVerbose false
-LogFile /var/log/intel_owl/clamav/clamav.log
+LogFile /var/log/intel_owl/malware_tools_analyzers/clamav/clamav.log
 LogTime true
 LogFileUnlock false
 LogFileMaxSize 0

diff --git a/integrations/malware_tools_analyzers/clamav/etc/freshclam.conf b/integrations/malware_tools_analyzers/clamav/etc/freshclam.conf
@@ -8,7 +8,7 @@ LogSyslog false
 LogTime yes
 PidFile /run/clamav/freshclam.pid
 Foreground true
-UpdateLogFile /var/log/intel_owl/clamav/freshclam.log
+UpdateLogFile /var/log/intel_owl/malware_tools_analyzers/clamav/freshclam.log
 LogVerbose false
 LogSyslog false
 LogFacility LOG_LOCAL6

diff --git a/integrations/malware_tools_analyzers/entrypoint.sh b/integrations/malware_tools_analyzers/entrypoint.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
-mkdir -p ${LOG_PATH}
-touch ${LOG_PATH}/gunicorn_access.log ${LOG_PATH}/gunicorn_errors.log
-chown -R malware_tools_analyzers-user:malware_tools_analyzers-user ${LOG_PATH}
+chown clamav:${USER} /var/lib/clamav ${LOG_PATH}/clamav
 # clamav processes
 echo "running freshclam"
 freshclam # download db for first time