30 lines
732 B
Plaintext
30 lines
732 B
Plaintext
|
#DESC Perdition POP and IMAP proxy
|
||
|
|
#
|
||
|
|
# Author: Russell Coker <russell@coker.com.au>
|
||
|
|
# X-Debian-Packages: perdition
|
||
|
|
#
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the perdition_t domain.
|
||
|
|
#
|
||
|
|
daemon_domain(perdition)
|
||
|
|
|
||
|
|
allow perdition_t pop_port_t:tcp_socket name_bind;
|
||
|
|
|
||
|
|
etc_domain(perdition)
|
||
|
|
|
||
|
|
# Use the network.
|
||
|
|
can_network_server(perdition_t)
|
||
|
|
allow perdition_t self:unix_stream_socket create_socket_perms;
|
||
|
|
allow perdition_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
|
||
|
|
# allow any domain to connect to the proxy
|
||
|
|
can_tcp_connect(userdomain, perdition_t)
|
||
|
|
|
||
|
|
# Use capabilities
|
||
|
|
allow perdition_t self:capability { setgid setuid net_bind_service };
|
||
|
|
|
||
|
|
allow perdition_t etc_t:file { getattr read };
|
||
|
|
allow perdition_t etc_t:lnk_file read;
|