Package: selinux-policy-default
Version: 2:0.0.20080702-12
Severity: important
The amavis policy is not shipped in the Debian package, instead all
amavis files are tagged as clamd_*. This doesn't work, the following
is a snippet from dmesg, with enforce=0:
Oct 15 08:02:05 bender kernel: type=1400 audit(1224050525.616:3211): avc:
denied { connectto } for pid=30825 comm="amavisd-new"
path="/var/run/clamav/clamd.ctl" scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:system_r:clamd_t:s0 tclass=unix_stream_socket
Oct 15 08:02:05 bender kernel: type=1400 audit(1224050525.684:3212): avc:
denied { name_bind } for pid=30825 comm="amavisd-new" src=15191
scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:port_t:s0
tclass=udp_socket
Oct 15 08:02:05 bender kernel: type=1400 audit(1224050525.720:3213): avc:
denied { node_bind } for pid=30825 comm="amavisd-new" src=15191
scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket
Oct 15 08:02:08 bender kernel: type=1400 audit(1224050528.317:3214): avc:
denied { name_connect } for pid=30825 comm="amavisd-new" dest=10025
scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:amavisd_send_port_t:s0 tclass=tcp_socket
Oct 15 08:02:11 bender kernel: type=1400 audit(1224050531.816:3215): avc:
denied { read } for pid=30659 comm="amavisd-new" name="5.8" dev=sda3
ino=14684357 scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:usr_t:s0 tclass=lnk_file
Oct 15 08:04:08 bender kernel: type=1400 audit(1224050648.609:3216): avc:
denied { read } for pid=32063 comm="file" name="magic.mgc" dev=sda3
ino=10485954 scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:usr_t:s0 tclass=file
Oct 15 08:04:08 bender kernel: type=1400 audit(1224050648.645:3217): avc:
denied { getattr } for pid=32063 comm="file" path="/usr/share/file/magic.mgc"
dev=sda3 ino=10485954 scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:usr_t:s0 tclass=file
Oct 15 08:04:09 bender kernel: type=1400 audit(1224050649.024:3218): avc:
denied { signull } for pid=30652 comm="amavisd-new"
scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:system_r:clamd_t:s0
tclass=process
Oct 15 08:06:07 bender kernel: type=1400 audit(1224050766.981:3219): avc:
denied { execute } for pid=32092 comm="amavisd-new" name="file" dev=sda3
ino=12584670 scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=file
Oct 15 08:06:07 bender kernel: type=1400 audit(1224050767.017:3220): avc:
denied { read } for pid=32092 comm="amavisd-new" name="file" dev=sda3
ino=12584670 scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=file
Oct 15 08:06:07 bender kernel: type=1400 audit(1224050767.057:3221): avc:
denied { execute_no_trans } for pid=32092 comm="amavisd-new"
path="/usr/bin/file" dev=sda3 ino=12584670
scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:bin_t:s0
tclass=file
Oct 15 08:06:07 bender kernel: type=1400 audit(1224050767.149:3222): avc:
denied { ioctl } for pid=31004 comm="amavisd-new"
path="/usr/share/perl/5.8.8/unicore/To/Fold.pl" dev=sda3 ino=134640
scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:usr_t:s0
tclass=file
Oct 15 08:07:51 bender kernel: type=1400 audit(1224050871.461:3223): avc:
denied { node_bind } for pid=32129 comm="amavisd-new" src=2042
scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket
Oct 15 08:09:11 bender kernel: type=1400 audit(1224050951.301:3224): avc:
denied { name_connect } for pid=31004 comm="amavisd-new" dest=10025
scontext=system_u:system_r:clamd_t:s0
tcontext=system_u:object_r:amavisd_send_port_t:s0 tclass=tcp_socket
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
