From Debian package 0.0.20080702-11 Allow clamd_t to search bin_t and read bin_t links (Needed for amavisd running as clamd_t?) Index: policy/modules/services/clamav.te =================================================================== --- policy/modules/services/clamav.te.orig +++ policy/modules/services/clamav.te @@ -74,6 +74,8 @@ allow clamd_t self:unix_stream_socket { create_stream_socket_perms connectto }; allow clamd_t self:unix_dgram_socket create_socket_perms; allow clamd_t self:tcp_socket { listen accept }; +corecmd_search_bin(clamd_t) +corecmd_read_bin_symlinks(clamd_t) # configuration files allow clamd_t clamd_etc_t:dir list_dir_perms;