add seboolean

This commit is contained in:
Arne Teuke
2025-06-08 14:26:09 +02:00
parent fc9ead9c98
commit 92e3fffef2
3 changed files with 14 additions and 1 deletions

View File

@@ -8,4 +8,11 @@ class clamav_cd::main::config (
) inherits clamav_cd::params {
include clamav_cd::main::service
# Ensure the SELinux boolean antivirus_can_scan_system is enabled if disabled
exec { 'enable_antivirus_can_scan_system':
command => '/usr/sbin/setsebool -P antivirus_can_scan_system 1',
unless => '/usr/sbin/getsebool antivirus_can_scan_system | grep --quiet "on"',
path => ['/usr/sbin', '/bin'],
}
}