rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Clamav patch from Dan Walsh.

Browse Source
This commit is contained in:
Chris PeBenito 2010-01-07 11:49:44 -05:00
parent c5155ac008
commit 192fb874f5
1 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/services/clamav.te
View File

@ -1,5 +1,5 @@
policy_module(clamav, 1.7.0) policy_module(clamav, 1.7.1)
######################################## ########################################
# #
@ -115,12 +115,12 @@ files_read_etc_files(clamd_t)
files_read_etc_runtime_files(clamd_t) files_read_etc_runtime_files(clamd_t)
files_search_spool(clamd_t) files_search_spool(clamd_t)
auth_use_nsswitch(clamd_t)
logging_send_syslog_msg(clamd_t) logging_send_syslog_msg(clamd_t)
miscfiles_read_localization(clamd_t) miscfiles_read_localization(clamd_t)
sysnet_dns_name_resolve(clamd_t)
cron_use_fds(clamd_t) cron_use_fds(clamd_t)
cron_use_system_job_fds(clamd_t) cron_use_system_job_fds(clamd_t)
cron_rw_pipes(clamd_t) cron_rw_pipes(clamd_t)
@ -187,15 +187,15 @@ domain_use_interactive_fds(freshclam_t)
files_read_etc_files(freshclam_t) files_read_etc_files(freshclam_t)
files_read_etc_runtime_files(freshclam_t) files_read_etc_runtime_files(freshclam_t)
miscfiles_read_localization(freshclam_t) auth_use_nsswitch(freshclam_t)
sysnet_dns_name_resolve(freshclam_t) miscfiles_read_localization(freshclam_t)
clamav_stream_connect(freshclam_t) clamav_stream_connect(freshclam_t)
cron_use_fds(freshclam_t) optional_policy(`
cron_use_system_job_fds(freshclam_t) cron_system_entry(freshclam_t, freshclam_exec_t)
cron_rw_pipes(freshclam_t) ')
######################################## ########################################
# #
@ -246,6 +246,10 @@ clamav_stream_connect(clamscan_t)
mta_send_mail(clamscan_t) mta_send_mail(clamscan_t)
optional_policy(`
amavis_read_spool_files(clamscan_t)
')
optional_policy(` optional_policy(`
apache_read_sys_content(clamscan_t) apache_read_sys_content(clamscan_t)
') ')