[selinux-policy: 2366/3172] Clamav patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:30:02 UTC 2010


commit 192fb874f51169b58c722850e72fb410b52208da
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu Jan 7 11:49:44 2010 -0500

    Clamav patch from Dan Walsh.

 policy/modules/services/clamav.te |   20 ++++++++++++--------
 1 files changed, 12 insertions(+), 8 deletions(-)
---
diff --git a/policy/modules/services/clamav.te b/policy/modules/services/clamav.te
index 8075060..c48c85b 100644
--- a/policy/modules/services/clamav.te
+++ b/policy/modules/services/clamav.te
@@ -1,5 +1,5 @@
 
-policy_module(clamav, 1.7.0)
+policy_module(clamav, 1.7.1)
 
 ########################################
 #
@@ -115,12 +115,12 @@ files_read_etc_files(clamd_t)
 files_read_etc_runtime_files(clamd_t)
 files_search_spool(clamd_t)
 
+auth_use_nsswitch(clamd_t)
+
 logging_send_syslog_msg(clamd_t)
 
 miscfiles_read_localization(clamd_t)
 
-sysnet_dns_name_resolve(clamd_t)
-
 cron_use_fds(clamd_t)
 cron_use_system_job_fds(clamd_t)
 cron_rw_pipes(clamd_t)
@@ -187,15 +187,15 @@ domain_use_interactive_fds(freshclam_t)
 files_read_etc_files(freshclam_t)
 files_read_etc_runtime_files(freshclam_t)
 
-miscfiles_read_localization(freshclam_t)
+auth_use_nsswitch(freshclam_t)
 
-sysnet_dns_name_resolve(freshclam_t)
+miscfiles_read_localization(freshclam_t)
 
 clamav_stream_connect(freshclam_t)
 
-cron_use_fds(freshclam_t)
-cron_use_system_job_fds(freshclam_t)
-cron_rw_pipes(freshclam_t)
+optional_policy(`
+	cron_system_entry(freshclam_t, freshclam_exec_t)
+')
 
 ########################################
 #
@@ -247,5 +247,9 @@ clamav_stream_connect(clamscan_t)
 mta_send_mail(clamscan_t)
 
 optional_policy(`
+	amavis_read_spool_files(clamscan_t)
+')
+
+optional_policy(`
 	apache_read_sys_content(clamscan_t)
 ')


More information about the scm-commits mailing list