Hi guys,

I have an issue with clamd and I dont really know what to do with it, spend days trying to understand how SELinux works

clamd is currently writing its log to /var/log/clamav/clamd.log

my php/apache is trying to fopen that log but is getting a permission error due to SELinux

SELinux says the log se type is running under var_log_t
I change it to httpd_sys_rw_content_t and php/apache can open it fine but now clamd cannot start because it cannot
append to the log file

Is there a permission for SELinux that will allow both clamd AND apache read/write to the log file?
unfortunately due to circumstance I am not allowed to disable SELinux into permissive mode but i would be happy with a "SELinux ignore this file completly" option?

I know this is more of an SELinux question but I dont know if anyone here has come across the issue and solved it?

kind regards
Robert

Hello Robert,

I know that ClamWin is based on ClamAV engine, but it's not related to ClamAV/clamd itself. ClamWin is a Windows port, focused on end-users. I don't think that there are people here on this forum that could reply your Linux question as it's out of ClamWin project focus. Maybe you should contact Apache forums or ClamAV forums for help.

Sorry for not helping you further. Hope you find the answer you're looking for.

Best regards,
Eduardo

Thanks for the information, apologies for posting here :)