update

none

common/etc/MailScanner/MailScanner.conf

@@ -244,8 +244,8 @@ Sendmail2 = /usr/lib/sendmail
 #       using the "clamd" virus scanner AND clamd is not running as root,
 #       then this must be set to the group clamd is using (from your
 #       clamd.conf), example:
-#       Incoming Work Group = clamav
+#       Incoming Work Group = mtagroup
-#       Incoming Work Permissions = 0640
+#       Incoming Work Permissions = 0660
 #
 #		The installer creates a group on your system called "mtagroup"
 #		and adds found users from mail, clamav, postfix, exim, etc
@@ -304,7 +304,7 @@ Quarantine Group =
 # Typical use: let the webserver have access to the files so users can
 # download them if they really want to.
 # Use with care, you may well open security holes.
-Quarantine Permissions = 0664
+Quarantine Permissions = 0660
 
 #
 # Processing Incoming Mail

rhel/install.sh

@@ -351,6 +351,31 @@ if [ $CPANOPTION != 1 ]; then
 	fi
 fi
 
+# ask about setting permissive mode for SeLinux
+clear
+echo;
+echo "Set PERMISSIVE mode for SELinux?"; echo;
+echo "SELinux will cause problems for virus scanners accessing the working directory";
+echo "used when processing email. Enabling permissive mode will allow the virus scanner";
+echo "to access the files that need to be scanned until you can create a policy to ";
+echo "allow working directory file access while in ENFORCING mode. If you have already";
+echo "disabled SELinux selecting 'yes' will not change that. Note that a reboot is ";
+echo "required after the installation for this to take effect.";
+echo;
+echo "Recommended: Y (yes)"; echo;
+read -r -p "Set permissive mode for SELinux? [n/Y] : " response
+
+if [[ $response =~ ^([yY][eE][sS]|[yY])$ ]]; then
+    # user wants to set permissive mode
+	SELMODE=1
+elif [ -z $response ]; then 
+	 # user wants to set permissive mode
+	SELMODE=1
+else
+    # user does not want to change SELinux
+    SELMODE=0
+fi
+
 # back up their stuff
 SAVEDIR="$HOME/ms_upgrade/saved.$$";
 
@@ -701,16 +726,6 @@ if [ -f "/etc/postfix/master.cf" ]; then
 	sed -i "s/qmgr      unix/qmgr      fifo/g" /etc/postfix/master.cf
 fi
 
-# make sure in starting directory
-cd $THISCURRPMDIR
-
-clear
-echo;
-echo "Installing the MailScanner RPM ... ";
-
-# install the mailscanner rpm
-$RPM -Uvh $NODEPS MailScanner*noarch.rpm
-
 # fix the clamav wrapper if the user does not exist
 if [ -f '/etc/freshclam.conf' ]; then
 	if id -u clam >/dev/null 2>&1; then
@@ -728,8 +743,39 @@ if [ -f '/etc/freshclam.conf' ]; then
 		
 		freshclam
 	fi
+	
+	if [ -f '/etc/init.d/clamd' ]; then
+		chkconfig clamd on
+	fi
 fi
 
+# selinux
+if [ $SELMODE == 1 ]; then
+	OLDTHING='SELINUX=enforcing';
+	NEWTHING='SELINUX=permissive';
+		
+	if [ -f '/etc/selinux/config' ]; then
+		perl -pi -e 's/'$OLDTHING'/'$NEWTHING'/;' /etc/selinux/config
+	else	
+		clear
+		echo;
+		echo "WARNING: I was unable to find the SELinux configuration file to set";
+		echo "the permissive mode. You will need to find the file and set this item";
+		echo "manually. Press <return> to continue.";
+		read foobar
+	fi
+fi
+
+# make sure in starting directory
+cd $THISCURRPMDIR
+
+clear
+echo;
+echo "Installing the MailScanner RPM ... ";
+
+# install the mailscanner rpm
+$RPM -Uvh $NODEPS MailScanner*noarch.rpm
+
 if [ $? != 0 ]; then
 	echo;
 	echo '----------------------------------------------------------';