diff --git a/policy/modules/services/clamav.te b/policy/modules/services/clamav.te index 8075060..c48c85b 100644 --- a/policy/modules/services/clamav.te +++ b/policy/modules/services/clamav.te @@ -1,5 +1,5 @@ -policy_module(clamav, 1.7.0) +policy_module(clamav, 1.7.1) ######################################## # @@ -115,12 +115,12 @@ files_read_etc_files(clamd_t) files_read_etc_runtime_files(clamd_t) files_search_spool(clamd_t) +auth_use_nsswitch(clamd_t) + logging_send_syslog_msg(clamd_t) miscfiles_read_localization(clamd_t) -sysnet_dns_name_resolve(clamd_t) - cron_use_fds(clamd_t) cron_use_system_job_fds(clamd_t) cron_rw_pipes(clamd_t) @@ -187,15 +187,15 @@ domain_use_interactive_fds(freshclam_t) files_read_etc_files(freshclam_t) files_read_etc_runtime_files(freshclam_t) -miscfiles_read_localization(freshclam_t) +auth_use_nsswitch(freshclam_t) -sysnet_dns_name_resolve(freshclam_t) +miscfiles_read_localization(freshclam_t) clamav_stream_connect(freshclam_t) -cron_use_fds(freshclam_t) -cron_use_system_job_fds(freshclam_t) -cron_rw_pipes(freshclam_t) +optional_policy(` + cron_system_entry(freshclam_t, freshclam_exec_t) +') ######################################## # @@ -247,5 +247,9 @@ clamav_stream_connect(clamscan_t) mta_send_mail(clamscan_t) optional_policy(` + amavis_read_spool_files(clamscan_t) +') + +optional_policy(` apache_read_sys_content(clamscan_t) ')