Mastering Linux Security and Hardening - Second Edition

SELinux considerations

It used to be that doing an antivirus scan on a Red Hat-type system would trigger an SELinux alert. But, in the course of proofing this chapter, the scans all worked as they should, and SELinux never bothered me once. So, it

If you ever do generate any SELinux alerts with your virus scans, all you need to do to fix it is to change one Boolean:

[donnie@localhost ~]$ getsebool -a | grep 'virus'antivirus_can_scan_system --> offantivirus_use_jit --> off[donnie@localhost ~]$

What interests us here is the antivirus_can_scan_system Boolean, which is off by default. To turn it on to enable virus scans, just do this:

[donnie@localhost ~]$ sudo setsebool -P antivirus_can_scan_system on[sudo] password for donnie:[donnie@localhost ...