add seboolean

This commit is contained in:
Arne Teuke
2025-06-08 14:26:09 +02:00
parent fc9ead9c98
commit 92e3fffef2
3 changed files with 14 additions and 1 deletions

View File

@@ -5,6 +5,7 @@
"behaviour",
"bofh",
"clamd",
"clamonacc",
"clamscan",
"Clamuko",
"clamupdate",
@@ -14,6 +15,7 @@
"fanotify",
"filesize",
"freshclam",
"getsebool",
"INADDR",
"libclamav",
"logclean",
@@ -33,14 +35,18 @@
"PCRE",
"preludeanalyzername",
"preludeenable",
"recieve",
"RLIMIT",
"safebrowsing",
"setsebool",
"subsig",
"subsigs",
"tcpaddre",
"tcpaddress",
"tcpsocket",
"VIRUSEVENT",
"virusgroup",
"VIRUSNAME",
"XMLDOCS",
"xxxyyzzzz"
]

View File

@@ -8,4 +8,11 @@ class clamav_cd::main::config (
) inherits clamav_cd::params {
include clamav_cd::main::service
# Ensure the SELinux boolean antivirus_can_scan_system is enabled if disabled
exec { 'enable_antivirus_can_scan_system':
command => '/usr/sbin/setsebool -P antivirus_can_scan_system 1',
unless => '/usr/sbin/getsebool antivirus_can_scan_system | grep --quiet "on"',
path => ['/usr/sbin', '/bin'],
}
}

View File

@@ -677,7 +677,7 @@ User clamscan
#OnAccessMaxThreads 10
# Max amount of time (in milliseconds) that the OnAccess client should spend
# for every connect, send, and recieve attempt when communicating with clamd
# for every connect, send, and receive attempt when communicating with clamd
# via curl.
# Default: 5000 (5 seconds)
# OnAccessCurlTimeout 10000