Re: fc5 policy patch

[Russell Coker <russell@coker.com.au>]

On Saturday 20 May 2006 00:05, Russell Coker <russell@coker.com.au> wrote:
> My patch makes the anti-virus setup basically work.  Due to the complexity
> of the system there is a possibility of corner cases that I've missed, but
> the only way we will discover that is to get this policy released and have
> people try it.

Naturally immediately after I posted that message I discovered such a corner 
case, mail is apparently written to /var/lib/clamav by procmail and the 
policy does not permit that.  Determining the correct solution to this will 
take a bit of time (hopefully I'll have it done before my client starts work 
on Monday).

My previous patch is still worth including, it makes clamav usable on FC5, the 
update to allow storing the virus messages (or whatever it is that procmail 
is doing) can come later.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.