Fedora 19 clamd jit in logwatch, uncertain if bug?

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/08/2013 12:22 PM, Daniel J Walsh wrote:
> On 07/06/2013 06:42 AM, Frank Murphy wrote:
>> Do I need to bz this? This is all the info I have.
> 
> 
>> No avcs re clamd, but logwatch shows the following:
> 
>> --------------------- Clamav Begin ------------------------
> 
> 
>> Virus database reloaded 14 time(s) (last time with 3953698 viruses)
> 
>> **Unmatched Entries** LibClamAV Warning: RWX mapping denied: Can't
>> allocate RWX Memory: Permission denied LibClamAV Warning: Bytecode:
>> disabling JIT because SELinux is preventing 'execmem' access. Run
>> 'setsebool -P clamd_use_jit on'. <snipped/>
> 
>> That boolean doesn't seem to be in F19
> 
>> /bin/clamscan -r / --exclude-dir=/proc --exclude-dir=/sys 
>> --exclude-dir=/dev --exclude=/home/frank/Viruses
>> --move=/home/frank/Viruses -i --log=/var/log/clamscan.log
> 
>> Clamscan report itself just show one error
> 
>> ----------- SCAN SUMMARY ----------- Known viruses: 3952638 Engine
>> version: 0.97.8 Scanned directories: 23593 Scanned files: 199362 Infected
>> files: 0 Total errors: 1 Data scanned: 20502.27 MB Data read: 79546.97 MB
>> (ratio 0.26:1) Time: 7120.754 sec (118 m 40 s)
> 
> 
> 
> Try
> 
> antivirus_use_jit
> 
> 
> -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 

These is a bug in F19 where we did not provide the alias mappings
clamd_use_jit antivirus_use_jit
amavis_use_jit antivirus_use_jit


In Fedora 19 all antivirus domains were combined into a single domain, but
when the boolean names were changed we forgot to add the mappings.  This
should be fixed in the next release of SELinux Policy for F19, Rawhide and
RHEL7 Tests.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlHa6qQACgkQrlYvE4MpobNMSwCg3zRk+HMwcv1EuKMTe8dQ3UBv
xigAoNWhV4I+z0W707Yg4VacrkKFT5nd
=lJ1I
-----END PGP SIGNATURE-----