-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/08/2013 12:22 PM, Daniel J Walsh wrote: > On 07/06/2013 06:42 AM, Frank Murphy wrote: >> Do I need to bz this? This is all the info I have. > > >> No avcs re clamd, but logwatch shows the following: > >> --------------------- Clamav Begin ------------------------ > > >> Virus database reloaded 14 time(s) (last time with 3953698 viruses) > >> **Unmatched Entries** LibClamAV Warning: RWX mapping denied: Can't >> allocate RWX Memory: Permission denied LibClamAV Warning: Bytecode: >> disabling JIT because SELinux is preventing 'execmem' access. Run >> 'setsebool -P clamd_use_jit on'. <snipped/> > >> That boolean doesn't seem to be in F19 > >> /bin/clamscan -r / --exclude-dir=/proc --exclude-dir=/sys >> --exclude-dir=/dev --exclude=/home/frank/Viruses >> --move=/home/frank/Viruses -i --log=/var/log/clamscan.log > >> Clamscan report itself just show one error > >> ----------- SCAN SUMMARY ----------- Known viruses: 3952638 Engine >> version: 0.97.8 Scanned directories: 23593 Scanned files: 199362 Infected >> files: 0 Total errors: 1 Data scanned: 20502.27 MB Data read: 79546.97 MB >> (ratio 0.26:1) Time: 7120.754 sec (118 m 40 s) > > > > Try > > antivirus_use_jit > > > -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/selinux > > These is a bug in F19 where we did not provide the alias mappings clamd_use_jit antivirus_use_jit amavis_use_jit antivirus_use_jit In Fedora 19 all antivirus domains were combined into a single domain, but when the boolean names were changed we forgot to add the mappings. This should be fixed in the next release of SELinux Policy for F19, Rawhide and RHEL7 Tests. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlHa6qQACgkQrlYvE4MpobNMSwCg3zRk+HMwcv1EuKMTe8dQ3UBv xigAoNWhV4I+z0W707Yg4VacrkKFT5nd =lJ1I -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
