On 08/25/2010 10:42 PM, Arthur Dent wrote:
These are avcs I have collected today. I have made no attempt to remove
duplicates and some of them probably relate to when I was playing with
the clamdwatch problem...
type=AVC msg=audit(1282693685.536:49993): avc: denied { read } for
pid=8053 comm="clamd" path="/tmp/clamassassinmsg.ELpNsCwoK2"
dev=sda6
ino=86012 scontext=unconfined_u:system_r:clamd_t:s0
tcontext=system_u:object_r:procmail_tmp_t:s0 tclass=file
----
I thought we allowed this already?
add that to myclamd.te, then rebuild, reinstall
all the other denials can be ignored. (hidden)
procmail_rw_tmp_files(clamd_t)