[CentOS] clamav and selinux

2009-04-03 Thread Craig White
after cleaning up a bunch or selinux alerts, I update and wham, clamav/clamd/clamav-db make me assert contexts again to /var/clamav like... chcon -t clamd_t clamav -R which temporarily solves the problem but it would be better if it were policy and not file contexts. So I search and see for some

Re: [CentOS] clamav and selinux

2009-04-04 Thread Ralph Angenendt
Craig White wrote: > after cleaning up a bunch or selinux alerts, I update and wham, > clamav/clamd/clamav-db make me assert contexts again to /var/clamav > like... > > chcon -t clamd_t clamav -R > > which temporarily solves the problem but it would be better if it were > policy and not file cont

Re: [CentOS] clamav and selinux

2009-04-04 Thread Craig White
On Sat, 2009-04-04 at 14:08 +0200, Ralph Angenendt wrote: > Craig White wrote: > > after cleaning up a bunch or selinux alerts, I update and wham, > > clamav/clamd/clamav-db make me assert contexts again to /var/clamav > > like... > > > > chcon -t clamd_t clamav -R > > > > which temporarily solve

Re: [CentOS] clamav and selinux

2009-04-04 Thread Craig White
On Sat, 2009-04-04 at 06:00 -0700, Craig White wrote: > On Sat, 2009-04-04 at 14:08 +0200, Ralph Angenendt wrote: > > Craig White wrote: > > > after cleaning up a bunch or selinux alerts, I update and wham, > > > clamav/clamd/clamav-db make me assert contexts again to /var/clamav > > > like... > >

Re: [CentOS] clamav and selinux

2009-04-04 Thread Ralph Angenendt
Craig White wrote: > this might prove to be more durable through upgrades (time will tell). > > semanage fcontext -a -t clamd_t "/var/clamav(/.*)?" Yepp, I was just about to suggest using that, as it survives a relabeling of the file system :) Cheers, Ralph pgp10KsmFvyaC.pgp Description: PGP s