Re: Clamd - again...

From: Dominick Grift <domg472_at_nospam>
Date: Wed Aug 25 2010 - 20:47:23 GMT
To: selinux@lists.fedoraproject.org

On 08/25/2010 10:42 PM, Arthur Dent wrote:

>
> These are avcs I have collected today. I have made no attempt to remove
> duplicates and some of them probably relate to when I was playing with
> the clamdwatch problem...

> type=AVC msg=audit(1282693685.536:49993): avc: denied { read } for
> pid=8053 comm="clamd" path="/tmp/clamassassinmsg.ELpNsCwoK2" dev=sda6
> ino=86012 scontext=unconfined_u:system_r:clamd_t:s0
> tcontext=system_u:object_r:procmail_tmp_t:s0 tclass=file
> ----

I thought we allowed this already?

add that to myclamd.te, then rebuild, reinstall

all the other denials can be ignored. (hidden)

procmail_rw_tmp_files(clamd_t)

-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux

This message: [ Message body ]
Next message: Jason Axelson: "Re: Clamd - again..."
Previous message: Arthur Dent: "Re: Clamd - again..."
In reply to: Arthur Dent: "Re: Clamd - again..."
Next in thread: Arthur Dent: "Re: Clamd - again..."
Reply: Arthur Dent: "Re: Clamd - again..."

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]