Ron White wrote:
*snip*

This part should have a new thread of its own if it is to be pursued.

> 
> Moving on from that - today I turn my attention to Clamav and Exim and
> in particular SELinux on the Cent5 box. The installation was really easy
> but there are some issues with clam being able to access files in
> the /scan directory.
> 
> This is a subject I know nothing about, but want to resist the
> temptation to do the defacto 'disable SELinux'. Luckily I have the
> weekend ahead to study and see if I can work it out. Wish me luck!
> 

Not sure if it fits YOUR need, but we create a special group for our 'postal 
workers' (Exim, ClamAV, SA, Dovecot, Prayer, et al), one OTHER THAN the 
mail:mailnull or other legacy defaults.

Group rights on the fs, and matching EUID:EGID in the DB keep all those players 
*and no others* in the same ring-fence.


JM2CW

Bill


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to