diff --git a/policy-f20-contrib.patch b/policy-f20-contrib.patch index 993e74a..8579276 100644 --- a/policy-f20-contrib.patch +++ b/policy-f20-contrib.patch @@ -2645,10 +2645,10 @@ index 0000000..9d5214b + diff --git a/antivirus.if b/antivirus.if new file mode 100644 -index 0000000..df5b3be +index 0000000..ae5f0a3 --- /dev/null +++ b/antivirus.if -@@ -0,0 +1,322 @@ +@@ -0,0 +1,324 @@ +## SELinux policy for antivirus programs - amavis, clamd, freshclam and clamscan + +###################################### @@ -2668,6 +2668,8 @@ index 0000000..df5b3be + ') + + typeattribute $1 antivirus_domain; ++ ++ kernel_read_system_state($1) +') + +####################################### @@ -2973,10 +2975,10 @@ index 0000000..df5b3be +') diff --git a/antivirus.te b/antivirus.te new file mode 100644 -index 0000000..6d1de2c +index 0000000..cb58319 --- /dev/null +++ b/antivirus.te -@@ -0,0 +1,271 @@ +@@ -0,0 +1,270 @@ +policy_module(antivirus, 1.0.0) + +######################################## @@ -3083,7 +3085,6 @@ index 0000000..6d1de2c +can_exec(antivirus_domain, antivirus_exec_t) + +kernel_read_network_state(antivirus_domain) -+kernel_read_system_state(antivirus_domain) +kernel_read_all_sysctls(antivirus_domain) + +corecmd_exec_bin(antivirus_domain)