[Mimedefang] SELinux labeling

[Stephen L Johnson]

On Tue, 2009-06-09 at 00:35 -0500, Kenneth Porter wrote:
> Has anyone come up with a good scheme/policy for labeling files in the MD 
> directory so that both MD and ClamAV (and perhaps spamd and other AVs) have 
> access to them?

If I understand you question, you can run the clamd process as the
'defang' user. It's easy enough for me because I maintain my own
customized (for my site) ClamAV rpm package. Another option is to add
the users the processes (clamd, spamd, etc) run under to the 'defang'
group and change permissions on the MD directory to allow the proper
access.

-- 
Stephen L Johnson  <stephen.johnson at arkansas.gov>
Unix Systems Administrator / DNS Hostmaster
Department of Information Systems
State of Arkansas
501-682-4339