add seboolean
This commit is contained in:
6
.vscode/settings.json
vendored
6
.vscode/settings.json
vendored
@@ -5,6 +5,7 @@
|
||||
"behaviour",
|
||||
"bofh",
|
||||
"clamd",
|
||||
"clamonacc",
|
||||
"clamscan",
|
||||
"Clamuko",
|
||||
"clamupdate",
|
||||
@@ -14,6 +15,7 @@
|
||||
"fanotify",
|
||||
"filesize",
|
||||
"freshclam",
|
||||
"getsebool",
|
||||
"INADDR",
|
||||
"libclamav",
|
||||
"logclean",
|
||||
@@ -33,14 +35,18 @@
|
||||
"PCRE",
|
||||
"preludeanalyzername",
|
||||
"preludeenable",
|
||||
"recieve",
|
||||
"RLIMIT",
|
||||
"safebrowsing",
|
||||
"setsebool",
|
||||
"subsig",
|
||||
"subsigs",
|
||||
"tcpaddre",
|
||||
"tcpaddress",
|
||||
"tcpsocket",
|
||||
"VIRUSEVENT",
|
||||
"virusgroup",
|
||||
"VIRUSNAME",
|
||||
"XMLDOCS",
|
||||
"xxxyyzzzz"
|
||||
]
|
||||
|
||||
@@ -8,4 +8,11 @@ class clamav_cd::main::config (
|
||||
|
||||
) inherits clamav_cd::params {
|
||||
include clamav_cd::main::service
|
||||
|
||||
# Ensure the SELinux boolean antivirus_can_scan_system is enabled if disabled
|
||||
exec { 'enable_antivirus_can_scan_system':
|
||||
command => '/usr/sbin/setsebool -P antivirus_can_scan_system 1',
|
||||
unless => '/usr/sbin/getsebool antivirus_can_scan_system | grep --quiet "on"',
|
||||
path => ['/usr/sbin', '/bin'],
|
||||
}
|
||||
}
|
||||
|
||||
@@ -677,7 +677,7 @@ User clamscan
|
||||
#OnAccessMaxThreads 10
|
||||
|
||||
# Max amount of time (in milliseconds) that the OnAccess client should spend
|
||||
# for every connect, send, and recieve attempt when communicating with clamd
|
||||
# for every connect, send, and receive attempt when communicating with clamd
|
||||
# via curl.
|
||||
# Default: 5000 (5 seconds)
|
||||
# OnAccessCurlTimeout 10000
|
||||
|
||||
Reference in New Issue
Block a user