diff --git a/.vscode/settings.json b/.vscode/settings.json index 501ab66..f888342 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -5,6 +5,7 @@ "behaviour", "bofh", "clamd", + "clamonacc", "clamscan", "Clamuko", "clamupdate", @@ -14,6 +15,7 @@ "fanotify", "filesize", "freshclam", + "getsebool", "INADDR", "libclamav", "logclean", @@ -33,14 +35,18 @@ "PCRE", "preludeanalyzername", "preludeenable", + "recieve", "RLIMIT", "safebrowsing", + "setsebool", "subsig", "subsigs", "tcpaddre", "tcpaddress", "tcpsocket", + "VIRUSEVENT", "virusgroup", + "VIRUSNAME", "XMLDOCS", "xxxyyzzzz" ] diff --git a/manifests/main/config.pp b/manifests/main/config.pp index c61bfa8..57edcb8 100644 --- a/manifests/main/config.pp +++ b/manifests/main/config.pp @@ -8,4 +8,11 @@ class clamav_cd::main::config ( ) inherits clamav_cd::params { include clamav_cd::main::service + + # Ensure the SELinux boolean antivirus_can_scan_system is enabled if disabled + exec { 'enable_antivirus_can_scan_system': + command => '/usr/sbin/setsebool -P antivirus_can_scan_system 1', + unless => '/usr/sbin/getsebool antivirus_can_scan_system | grep --quiet "on"', + path => ['/usr/sbin', '/bin'], + } } diff --git a/templates/scan.conf b/templates/scan.conf index 64ea71a..e551cd9 100644 --- a/templates/scan.conf +++ b/templates/scan.conf @@ -677,7 +677,7 @@ User clamscan #OnAccessMaxThreads 10 # Max amount of time (in milliseconds) that the OnAccess client should spend -# for every connect, send, and recieve attempt when communicating with clamd +# for every connect, send, and receive attempt when communicating with clamd # via curl. # Default: 5000 (5 seconds) # OnAccessCurlTimeout 10000