[clamav-users] onaccess scanning and selinux

Franky Van Liedekerke liedekef at telenet.be
Thu Mar 14 12:28:40 EDT 2019

When using onaccess scanning together with selinux, it seems these
2 are not sufficient:

setsebool -P antivirus_can_scan_system 1
setsebool -P clamd_use_jit 1

Onaccess scanning will still fail to initialize (at least when
launched via systemd). Currently I added this:

semanage permissive -a antivirus_t

But I presume that's in fact a little too much. There's no real doc
found at clamav concerning selinux either, so could someone shed a
light on this?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190314/8ec2d725/attachment.html>

More information about the clamav-users mailing list