initial commit

refpolicy/policy/modules/services/sendmail.fc

@@ -0,0 +1,8 @@
+# sendmail file contexts
+/etc/mail(/.*)?				context_template(system_u:object_r:etc_mail_t,s0)
+
+/var/log/sendmail\.st		--	context_template(system_u:object_r:sendmail_log_t,s0)
+/var/log/mail(/.*)?			context_template(system_u:object_r:sendmail_log_t,s0)
+
+/var/run/sendmail\.pid		--	context_template(system_u:object_r:sendmail_var_run_t,s0)
+/var/run/sm-client\.pid		--	context_template(system_u:object_r:sendmail_var_run_t,s0)

refpolicy/policy/modules/services/sendmail.if

@@ -0,0 +1,34 @@
+## <module name="sendmail" layer="services">
+## <summary>Policy for sendmail.</summary>
+
+########################################
+## <interface name="sendmail_domtrans">
+##	<description>
+##		Domain transition to sendmail.
+##	</description>
+##	<parameter name="domain">
+##		The type of the process performing this action.
+##	</parameter>
+##	<infoflow type="write" weight="10"/>
+## </interface>
+#
+define(`sendmail_domtrans',`
+	requires_block_template(`$0'_depend)
+
+	domain_auto_trans($1,sendmail_exec_t,sendmail_t)
+
+	allow $1 sendmail_t:fd use;
+	allow sendmail_t $1:fd use;
+	allow sendmail_t $1:fifo_file rw_file_perms;
+	allow sendmail_t $1:process sigchld;
+')
+
+define(`sendmail_domtrans_depend',`
+	type sendmail_exec_t, sendmail_t;
+
+	class process sigchld;
+	class fd use;
+	class fifo_file rw_file_perms;
+')
+
+## </module>