add dkim from stefan schulze frielinghaus.
This commit is contained in:
parent
21b1d1096f
commit
5a6b1fe2b4
@ -10,6 +10,7 @@
|
|||||||
- Add missing compatibility aliases for xdm_xserver*_t types.
|
- Add missing compatibility aliases for xdm_xserver*_t types.
|
||||||
- Added modules:
|
- Added modules:
|
||||||
abrt (Dan Walsh)
|
abrt (Dan Walsh)
|
||||||
|
dkim (Stefan Schulze Frielinghaus)
|
||||||
gitosis (Miroslav Grepl)
|
gitosis (Miroslav Grepl)
|
||||||
gnomeclock (Dan Walsh)
|
gnomeclock (Dan Walsh)
|
||||||
hddtemp (Dan Walsh)
|
hddtemp (Dan Walsh)
|
||||||
|
9
policy/modules/services/dkim.fc
Normal file
9
policy/modules/services/dkim.fc
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
/etc/mail/dkim-milter/keys(/.*)? gen_context(system_u:object_r:dkim_milter_private_key_t,s0)
|
||||||
|
|
||||||
|
/usr/sbin/dkim-filter -- gen_context(system_u:object_r:dkim_milter_exec_t,s0)
|
||||||
|
|
||||||
|
/var/db/dkim(/.*)? gen_context(system_u:object_r:dkim_milter_private_key_t,s0)
|
||||||
|
|
||||||
|
/var/run/dkim-filter(/.*)? gen_context(system_u:object_r:dkim_milter_data_t,s0)
|
||||||
|
/var/run/dkim-milter(/.*)? gen_context(system_u:object_r:dkim_milter_data_t,s0)
|
||||||
|
/var/run/dkim-milter\.pid -- gen_context(system_u:object_r:dkim_milter_data_t,s0)
|
1
policy/modules/services/dkim.if
Normal file
1
policy/modules/services/dkim.if
Normal file
@ -0,0 +1 @@
|
|||||||
|
## <summary>DomainKeys Identified Mail milter.</summary>
|
32
policy/modules/services/dkim.te
Normal file
32
policy/modules/services/dkim.te
Normal file
@ -0,0 +1,32 @@
|
|||||||
|
|
||||||
|
policy_module(dkim, 1.0.0)
|
||||||
|
|
||||||
|
########################################
|
||||||
|
#
|
||||||
|
# Declarations
|
||||||
|
#
|
||||||
|
|
||||||
|
milter_template(dkim)
|
||||||
|
|
||||||
|
# Type for the private key of dkim-filter
|
||||||
|
type dkim_milter_private_key_t;
|
||||||
|
files_type(dkim_milter_private_key_t)
|
||||||
|
|
||||||
|
########################################
|
||||||
|
#
|
||||||
|
# Local policy
|
||||||
|
#
|
||||||
|
|
||||||
|
allow dkim_milter_t self:capability { setgid setuid };
|
||||||
|
|
||||||
|
read_files_pattern(dkim_milter_t, dkim_milter_private_key_t, dkim_milter_private_key_t)
|
||||||
|
|
||||||
|
kernel_read_kernel_sysctls(dkim_milter_t)
|
||||||
|
|
||||||
|
dev_read_urand(dkim_milter_t)
|
||||||
|
|
||||||
|
files_read_etc_files(dkim_milter_t)
|
||||||
|
|
||||||
|
sysnet_dns_name_resolve(dkim_milter_t)
|
||||||
|
|
||||||
|
mta_read_config(dkim_milter_t)
|
Loading…
Reference in New Issue
Block a user