From Debian package 0.0.20080702-16 Allow clamd_t access to inherit it's own fds Index: policy/modules/services/clamav.te =================================================================== --- policy/modules/services/clamav.te.orig +++ policy/modules/services/clamav.te @@ -75,6 +75,7 @@ allow clamd_t self:unix_stream_socket { create_stream_socket_perms connectto }; allow clamd_t self:unix_dgram_socket create_socket_perms; allow clamd_t self:tcp_socket { listen accept }; +allow clamd_t self:fd use; corecmd_exec_bin(clamd_t) corecmd_read_bin_symlinks(clamd_t) files_read_usr_files(clamd_t)