Tweaks to the clamav policy
Russell Coker
russell at coker.com.au
Fri Apr 22 08:23:32 UTC 2005
On Thursday 17 March 2005 00:17, David Hampton
<hampton-rh at rainbolthampton.net> wrote:
> I've added support to the (unused) clamav policy to allow listening for
> service requests on a TCP socket, and for interacting with amavis. I
> also made some tweaks that tighten up the network access allowed by
> freshclam, split the freshclam and spamd log files into two different
> types, and make the clamd control socket a unique type. Thanks.
Another thing, please don't add new _sock_t types. Among other things you
didn't give it the pidfile attribute to mark it as something that init
scripts can unlink.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
More information about the fedora-selinux-list
mailing list