Clamscan denied access by Selinux - ?

Support for security such as Firewalls and securing linux
Post Reply
lightman47
Posts: 1521
Joined: 2014/05/21 20:16:00
Location: Central New York, USA

Clamscan denied access by Selinux - ?

Post by lightman47 » 2018/01/11 13:42:10

In trying to diagnose drive issues on one of my machines I find that over 1/3 of it's message log is consumed with clamscan/Selinux denial messages. Along with that are suggestions for correcting. My question then becomes 'Should I correct?", or should I just accept the messages?

Thank you.

pjsr2
Posts: 614
Joined: 2014/03/27 20:11:07

Re: Clamscan denied access by Selinux - ?

Post by pjsr2 » 2018/01/11 16:26:10

When you get selinux denial messages, it means that the offending files are not scanned. Since you want to have them scanned, you have to address the selinux warnings.

You have to set at least antivirus_can_scan_system and clamd_use_jit. You can do so with the following commands:

Code: Select all

sudo setsebool -P antivirus_can_scan_system 1
sudo setsebool -P clamd_use_jit 1
Does this solve your issue? If not, please add some more detail on which selinux denial messages you get.

Post Reply