Fedora 19 clamd jit in logwatch, uncertain if bug?

Frank Murphy frankly3d at gmail.com
Sat Jul 6 17:47:02 UTC 2013


On Sat, 6 Jul 2013 22:24:35 +1000
Douglas Brown <d46.brown at student.qut.edu.au> wrote:

> Try this:
> 
> First run: semanage dontaudit off
> 
> Which will disable any 'dontaudit' rules.
> 
> Rerun clam.
> 
> Then: grep clam /var/log/audit/audit.log | audit2why
> 
> semanage dontaudit on
> 
> This *may* give you somewhere to start.
> 
> Cheers,
> Doug
> 

This came back will try it:
grep clam /var/log/audit/audit.log | audit2why
type=AVC msg=audit(1373130883.401:2868): avc:  denied  { execmem }
for  pid=1144 comm="clamd" scontext=system_u:system_r:antivirus_t:s0
tcontext=system_u:system_r:antivirus_t:s0 tclass=process

	Was caused by:
	The boolean antivirus_use_jit was set incorrectly. 
	Description:
	Determine whether can antivirus programs use JIT compiler.

	Allow access by executing:
	# setsebool -P antivirus_use_jit 1

-- 
Regards,
Frank  "When in doubt PANIC!"
 I check for new mail app. 20min
www.frankly3d.com


More information about the selinux mailing list