Re: Tweaks to the clamav policy

On Thursday 17 March 2005 00:17, David Hampton <hampton-rh@rainbolthampton.net> wrote:
> I've added support to the (unused) clamav policy to allow listening for
> service requests on a TCP socket, and for interacting with amavis. I
> also made some tweaks that tighten up the network access allowed by
> freshclam, split the freshclam and spamd log files into two different
> types, and make the clamd control socket a unique type. Thanks.

Another thing, please don't add new _sock_t types. Among other things you didn't give it the pidfile attribute to mark it as something that init scripts can unlink.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.