24 lines
743 B
Plaintext
24 lines
743 B
Plaintext
|
#DESC saslauthd - Authentication daemon for SASL
|
||
|
|
#
|
||
|
|
# Author: Colin Walters <walters@verbum.org>
|
||
|
|
#
|
||
|
|
|
||
|
|
daemon_domain(saslauthd, `, auth_chkpwd')
|
||
|
|
|
||
|
|
allow saslauthd_t self:fifo_file { read write };
|
||
|
|
allow saslauthd_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
allow saslauthd_t self:unix_stream_socket create_stream_socket_perms;
|
||
|
|
allow saslauthd_t saslauthd_var_run_t:sock_file create_file_perms;
|
||
|
|
|
||
|
|
allow saslauthd_t etc_t:dir { getattr search };
|
||
|
|
allow saslauthd_t etc_t:file r_file_perms;
|
||
|
|
allow saslauthd_t net_conf_t:file r_file_perms;
|
||
|
|
|
||
|
|
allow saslauthd_t self:file r_file_perms;
|
||
|
|
allow saslauthd_t proc_t:file read;
|
||
|
|
|
||
|
|
allow saslauthd_t urandom_device_t:chr_file { getattr read };
|
||
|
|
|
||
|
|
# Needs investigation
|
||
|
|
dontaudit saslauthd_t home_root_t:dir getattr;
|