> >>>> >>> Is this the default setting for clamd now? clamd_use_jit on Should we >>> turn this on by default? >> On a fresh install there is >> >> # Bytecode mode # # This option has been set to 'ForceInterpreter' in >> Fedora due to # security concerns by default. You might need to enable >> the # 'clamd_use_jit' SELinux boolean after setting this option to the # >> more efficient 'ForceJIT' value. # # Default: ForceInterpreter >> #ByteCodeMode ForceInterpreter >> >> We didn't change this, but had to change clamd_use_jit --> on. >> > Then I would open a bug with clamd.
I have done nothing, but install and configure clamav (scanner + server) and my logs are full of these: =======================8<=============================================== LibClamAV Warning: RWX mapping denied: Can't allocate RWX Memory: Permission denied LibClamAV Warning: Bytecode: disabling JIT because SELinux is preventing 'execmem' access. Run 'setsebool -P clamd_use_jit on'. =======================8<=============================================== I haven't had a chance to run the setsebool yet (I can't get access to the machine from work at the moment) Are there any other bools I should set while I'm at it? Mark -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
