Allow users to ptrace and send any kind of signal to spamassassin agents.

This commit is contained in:
Dominick Grift 2010-09-16 11:05:31 +02:00
parent c5caddd673
commit 4ff4ddfaa3

View File

@ -25,9 +25,13 @@ interface(`spamassassin_role',`
role $1 types { spamc_t spamassassin_t };
domtrans_pattern($2, spamassassin_exec_t, spamassassin_t)
allow $2 spamassassin_t:process { ptrace signal_perms };
ps_process_pattern($2, spamassassin_t)
domtrans_pattern($2, spamc_exec_t, spamc_t)
allow $2 spamc_t:process { ptrace signal_perms };
ps_process_pattern($2, spamc_t)
manage_dirs_pattern($2, spamassassin_home_t, spamassassin_home_t)