Selinux - Clamav

[Dominick Grift]

On Mon, Jun 07, 2010 at 11:09:01AM +0100, Frank Murphy wrote:
> Running the lastest clamav.
> 
> logwatch gives the following:
> 
> libclamav JIT: Can't allocate RWX Memory: Permission denied
> libclamav JIT: SELinux is preventing 'execmem' access.
> Run 'setsebool -P clamd_use_jit on' to allow access
> libclamav JIT: falling back to interpreter mode
> 
> 
> setsebool -P clamd_use_jit on
> 
> doesn't seem to stick,
> as I still get the warnings.
> 
> selinux-policy-3.7.19-23.fc13.noarch
> selinux-policy-targeted-3.7.19-23.fc13.noarch
> clamav-0.96.1-1300.fc13.i686
> 

Are you seeying any avc denials? if not, try semodule -DB to load policy with hidden denials removed. Then reproduce. To go back to hidding hidden denials: semodule -B

Does it work in permissive mode?
> 
> -- 
> Regards,
> 
> Frank Murphy
> UTF_8 Encoded
> Friend of Fedora
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20100607/5cbec1e7/attachment.bin