[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    [Clamav-users] about the FreeBSD security policy Config for Clamav
From:       "ZhangFrank" <frankzdf () hotmail ! com>
Date:       2006-09-29 3:32:38
Message-ID: BAY110-W47BF13B398A65122C003BC7180 () phx ! gbl
[Download RAW message or body]

Hi all and Wash,

  I have 3 kind of admins: System Admin(sysadm_r),security Admin(secadm_r) and Audit \
Admin(audit_r).

Secadm_r:
1.Default login domain is secadm_t, can read and write files(type is policy_config_t)
in /etc/security
2.Can implement sebsd_checkpolicy(type is checkpolicy_t), comlpile policy.conf into \
binary policy database. 3.can make install policy under /etc/security/sebsd/policy \
directory. 4.can label files.

audit_r:
1.check audit log
2.modify audit config
3.run audit commands

sysadm_r:
1.run "make reload" to load security stratgey
2.configure applications 

For above info, regards to ClamAV, when I use ClamAV to protect my server, how many \
processes do need, and what domain and type are they belong to.

Best,

Frank 



----------------------------------------
> Date: Thu, 24 Aug 2006 08:53:19 +0300
> From: wash@wananchi.com
> To: clamav-users@lists.clamav.net
> CC: frankzdf@hotmail.com
> Subject: Re: [Clamav-users] how to install clamav on Freebsd?
> 
> * On 24/08/06 10:56 +0800, ZhangFrank wrote:
> > hello everyone,
> > 
> > Im a fresher on Freebsd and Clamav  
> > 
> > So can u guys teach me how can I get clamav on a
> > Freebsd server platfrom and intall it? Thanks a lot!   
> > 
> > 
> 
> Hey Frank,
> 
> You made the right choice. Welcome to FreeBSD!
> If you installed the ports tree during your FreeBSD installation,
> then you simply have to do:
> 
> cd /usr/ports/security/clamav
> make config	# Choose the options you desire.
> make install clean
> cd /usr/local/etc/
> 
> Edit clamd.conf and freshclam.conf. To start with, if you still
> don't understand the stuff in there, just comment out the line
> that contains "Example" in both files then
> 
> echo "clamav_clamd_enable="YES"" >> /etc/rc.conf
> echo "clamav_freshclam_enable="YES"" >> /etc/rc.conf
> 
> That completes the installation process (for now).
> sh /usr/local/etc/rc.d/clamav-clamd start
> sh /usr/local/etc/rc.d/clamav-freshclam start
> 
> You'll definately come back to the .conf files later when you
> are integrating with your MTA (Exim, Postfix,, Sendmail, whichever
> you chose).
> 
> 
> 
> -Wash
> 
> http://www.netmeister.org/news/learn2quote.html
> 
> DISCLAIMER: See http://www.wananchi.com/bms/terms.php
> 
> --
> +======================================================================+
> > \      _,,,---,,_     | Odhiambo Washington    <wash@wananchi.com>
> Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
> > ,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
> '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
> +======================================================================+
> 
> "The two most common things in the universe are hydrogen and
> stupidity."

_________________________________________________________________
Windows Live Safety Center 为您的计算机提供免费的安全扫描服务。
http://safety.live.com/site/ZH-CN/default.htm
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html


[prev in list] [next in list] [prev in thread] [next in thread]