From 0cd8a1a4c1ba1a29b42f003ba5521a8792103856 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sep 08 2012 10:21:56 +0000 Subject: Freshclam reads system and network state from Fedora Signed-off-by: Dominick Grift --- diff --git a/clamav.te b/clamav.te index a10350e..a4308da 100644 --- a/clamav.te +++ b/clamav.te @@ -1,4 +1,4 @@ -policy_module(clamav, 1.10.0) +policy_module(clamav, 1.10.1) ## ##

@@ -182,6 +182,9 @@ allow freshclam_t freshclam_var_log_t:dir setattr; allow freshclam_t clamd_var_log_t:dir search_dir_perms; logging_log_filetrans(freshclam_t, freshclam_var_log_t, file) +kernel_read_network_state(freshclam_t) +kernel_read_system_state(freshclam_t) + corenet_all_recvfrom_unlabeled(freshclam_t) corenet_all_recvfrom_netlabel(freshclam_t) corenet_tcp_sendrecv_generic_if(freshclam_t)