diff --git a/Containers/clamav/Dockerfile b/Containers/clamav/Dockerfile
index e3daab5e..c00aee2a 100644
--- a/Containers/clamav/Dockerfile
+++ b/Containers/clamav/Dockerfile
@@ -9,7 +9,7 @@ RUN set -ex; \
     rm /tmp/clamav.conf; \
     mkdir -p /var/run/clamav /run/lock; \
     chown -R clamav:clamav /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock; \
-    chmod 770 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock
+    chmod 777 -R /var/run/clamav /run/clamav /var/log/clamav /var/lock /run/lock /tmp
 
 VOLUME /var/lib/clamav
 
diff --git a/php/containers.json b/php/containers.json
index 997cd57c..281d7982 100644
--- a/php/containers.json
+++ b/php/containers.json
@@ -476,6 +476,12 @@
       ],
       "networks": [
         "nextcloud-aio"
+      ],
+      "read_only": true,
+      "tmpfs": [
+        "/var/lock",
+        "/var/log/clamav",
+        "/tmp"
       ]
     },
     {