after cleaning up a bunch or selinux alerts, I update and wham,
clamav/clamd/clamav-db make me assert contexts again to /var/clamav
like...
chcon -t clamd_t clamav -R
which temporarily solves the problem but it would be better if it were
policy and not file contexts. So I search and see for some
Craig White wrote:
> after cleaning up a bunch or selinux alerts, I update and wham,
> clamav/clamd/clamav-db make me assert contexts again to /var/clamav
> like...
>
> chcon -t clamd_t clamav -R
>
> which temporarily solves the problem but it would be better if it were
> policy and not file cont
On Sat, 2009-04-04 at 14:08 +0200, Ralph Angenendt wrote:
> Craig White wrote:
> > after cleaning up a bunch or selinux alerts, I update and wham,
> > clamav/clamd/clamav-db make me assert contexts again to /var/clamav
> > like...
> >
> > chcon -t clamd_t clamav -R
> >
> > which temporarily solve
On Sat, 2009-04-04 at 06:00 -0700, Craig White wrote:
> On Sat, 2009-04-04 at 14:08 +0200, Ralph Angenendt wrote:
> > Craig White wrote:
> > > after cleaning up a bunch or selinux alerts, I update and wham,
> > > clamav/clamd/clamav-db make me assert contexts again to /var/clamav
> > > like...
> >
Craig White wrote:
> this might prove to be more durable through upgrades (time will tell).
>
> semanage fcontext -a -t clamd_t "/var/clamav(/.*)?"
Yepp, I was just about to suggest using that, as it survives a relabeling of
the file system :)
Cheers,
Ralph
pgp10KsmFvyaC.pgp
Description: PGP s
5 matches
Mail list logo