Mastering Linux Security and Hardening

SELinux considerations

It used to be that doing an antivirus scan on a Red Hat-type system would trigger an SELinux alert. But, in the course of proofing this chapter, the scans all worked as they should, and SELinux never bothered me even once. So, it would appear that that problem is now fixed.

If you ever do generate any SELinux alerts with your virus scans, all you need to do to fix it is to change one Boolean:

[donnie@localhost ~]$ getsebool -a | grep 'virus'antivirus_can_scan_system --> offantivirus_use_jit --> off[donnie@localhost ~]$

What interests us here is the antivirus_can_scan_system Boolean, which is off by default. To turn it on to enable virus scans, just follow this:

[donnie@localhost ~]$ sudo setsebool -P antivirus_can_scan_system ...