Merge pull request #2477 from alan-turing-institute/release-v5.5.1

Release v5.5.1

Author: cptanalatriste

SECURITY.md

@@ -7,8 +7,8 @@ All organisations using an earlier version in production should update to the la
 
 | Version                                                                               | Supported          |
 | ------------------------------------------------------------------------------------- | ------------------ |
-| [5.5.0](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.5.0) | :white_check_mark: |
-| < 5.5.0                                                                               | :x:                |
+| [5.5.1](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.5.0) | :white_check_mark: |
+| < 5.5.1                                                                               | :x:                |
 
 ## Reporting a Vulnerability
 

VERSIONING.md

@@ -84,6 +84,7 @@ Additionally, a production instance of DSH is maintained for use by research pro
 | 2025      | [v5.4.0](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.4.0)           |
 | 2025      | [v5.4.1](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.4.1)           |
 | 2025      | [v5.5.0](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.5.0)           |
+| 2025      | [v5.5.1](https://github.com/alan-turing-institute/data-safe-haven/releases/tag/v5.5.1)           |
 
 ## Versions that have undergone formal security evaluation
 

data_safe_haven/resources/workspace/ansible/files/etc/clamav/clamd.conf

@@ -1,5 +1,5 @@
 # Path to a local socket file the daemon will listen on.
-LocalSocket /tmp/clamd.socket
+LocalSocket /run/clamav/clamd.ctl
 # Sets the permissions on the unix socket to the specified mode.
 LocalSocketMode 660
 # Prevent access to infected files for normal users

data_safe_haven/resources/workspace/ansible/files/etc/systemd/system/clamav-clamonacc.service

@@ -6,7 +6,6 @@ After=clamav-daemon.service syslog.target network.target
 [Service]
 Type=simple
 User=root
-ExecStartPre=/bin/bash -c "while [ ! -S /tmp/clamd.socket ]; do sleep 1; done"
 ExecStart=/usr/sbin/clamonacc --foreground=true
 Restart=on-failure
 RestartSec=30

data_safe_haven/version.py

@@ -1,2 +1,2 @@
-__version__ = "5.5.0"
+__version__ = "5.5.1"
 __version_info__ = tuple(__version__.split("."))