fix sendmail_exec_t encapsulation breakage

This commit is contained in:
Chris PeBenito 2006-05-10 18:42:22 +00:00
parent ac9db9b54e
commit 88bc7af316
2 changed files with 39 additions and 5 deletions

View File

@ -474,6 +474,41 @@ interface(`mta_send_mail',`
allow mta_user_agent $1:fifo_file { read write }; allow mta_user_agent $1:fifo_file { read write };
') ')
########################################
## <summary>
## Execute send mail in a specified domain.
## </summary>
## <desc>
## <p>
## Execute send mail in a specified domain.
## </p>
## <p>
## No interprocess communication (signals, pipes,
## etc.) is provided by this interface since
## the domains are not owned by this module.
## </p>
## </desc>
## <param name="source_domain">
## <summary>
## Domain to transition from.
## </summary>
## </param>
## <param name="target_domain">
## <summary>
## Domain to transition to.
## </summary>
## </param>
#
interface(`mta_sendmail_domtrans',`
gen_require(`
type sendmail_exec_t;
')
files_search_usr($1)
corecmd_read_sbin_symlinks($1)
domain_auto_trans($1,sendmail_exec_t,$2)
')
######################################## ########################################
## <summary> ## <summary>
## Execute sendmail in the caller domain. ## Execute sendmail in the caller domain.
@ -484,12 +519,13 @@ interface(`mta_send_mail',`
## </summary> ## </summary>
## </param> ## </param>
# #
interface(`mta_exec',` interface(`mta_sendmail_exec',`
gen_require(` gen_require(`
type sendmail_exec_t; type sendmail_exec_t;
') ')
can_exec($1, sendmail_exec_t) can_exec($1, sendmail_exec_t)
errprint(`bah $1'__endline__)
') ')
######################################## ########################################

View File

@ -28,12 +28,10 @@ interface(`sendmail_stub',`
# #
interface(`sendmail_domtrans',` interface(`sendmail_domtrans',`
gen_require(` gen_require(`
type sendmail_exec_t, sendmail_t; type sendmail_t;
') ')
files_search_usr($1) mta_sendmail_domtrans($1,sendmail_t)
corecmd_search_sbin($1)
domain_auto_trans($1,sendmail_exec_t,sendmail_t)
allow $1 sendmail_t:fd use; allow $1 sendmail_t:fd use;
allow sendmail_t $1:fd use; allow sendmail_t $1:fd use;