Research Menu

.
Skip Search Box

SELinux Mailing List

Clamd creates files in amavis_var_run_t

From: dwalsh_at_redhat.com
Date: Wed, 30 May 2007 11:03:01 -0400

  • nsaserefpolicy/policy/modules/services/clamav.te 2007-05-29 14:10:57.000000000 -0400
    +++ serefpolicy-3.0.1/policy/modules/services/clamav.te 2007-05-30 07:35:54.000000000 -0400
    @@ -121,6 +121,7 @@ amavis_read_lib_files(clamd_t) amavis_read_spool_files(clamd_t) amavis_spool_filetrans(clamd_t,clamd_var_run_t,sock_file)
    + amavis_create_pid_files(clamd_t)
    ') 
 ########################################
--- nsaserefpolicy/policy/modules/services/amavis.if	2007-05-29 14:10:57.000000000 -0400


+++ serefpolicy-3.0.1/policy/modules/services/amavis.if	2007-05-30 09:25:53.000000000 -0400

@@ -167,3 +167,22 @@
 	allow $1 amavis_var_run_t:file setattr;
 	files_search_pids($1)

 ')
+
+########################################
+## <summary>
+## Set the create of amavis var run files.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`amavis_create_pid_files',`
+ gen_require(`
+ type amavis_var_run_t;
+ ')
+
+ allow $1 amavis_var_run_t:file create_file_perms;
+ files_search_pids($1)
+')
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Wed 30 May 2007 - 13:37:26 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

  
bottom
National Security Agency / Central Security Service