# HG changeset patch # User IBBoard # Date 1458680965 0 # Node ID 47ddb26af9bde95e5c6b80de22dcacae425de35d # Parent a48b6011a084f7294ee8951158f29c37ad0d07cf Avoid SELinux warnings by disabling bytecode support ClamAV claims to have it locked down tight, but executing JITed byte code from assorted rules in an AV product *does* seem a little risky. Since it is optional, don't do it. diff -r a48b6011a084 -r 47ddb26af9bd common/freshclam.conf --- a/common/freshclam.conf Sun Mar 13 19:58:17 2016 +0000 +++ b/common/freshclam.conf Tue Mar 22 21:09:25 2016 +0000 @@ -222,6 +222,7 @@ # detection mechanisms and improvements to the ClamAV engine. # Default: enabled #Bytecode yes +Bytecode no # Download an additional 3rd party signature database distributed through # the ClamAV mirrors.