fix sendmail_exec_t encapsulation breakage
This commit is contained in:
parent
ac9db9b54e
commit
88bc7af316
@ -474,6 +474,41 @@ interface(`mta_send_mail',`
|
|||||||
allow mta_user_agent $1:fifo_file { read write };
|
allow mta_user_agent $1:fifo_file { read write };
|
||||||
')
|
')
|
||||||
|
|
||||||
|
########################################
|
||||||
|
## <summary>
|
||||||
|
## Execute send mail in a specified domain.
|
||||||
|
## </summary>
|
||||||
|
## <desc>
|
||||||
|
## <p>
|
||||||
|
## Execute send mail in a specified domain.
|
||||||
|
## </p>
|
||||||
|
## <p>
|
||||||
|
## No interprocess communication (signals, pipes,
|
||||||
|
## etc.) is provided by this interface since
|
||||||
|
## the domains are not owned by this module.
|
||||||
|
## </p>
|
||||||
|
## </desc>
|
||||||
|
## <param name="source_domain">
|
||||||
|
## <summary>
|
||||||
|
## Domain to transition from.
|
||||||
|
## </summary>
|
||||||
|
## </param>
|
||||||
|
## <param name="target_domain">
|
||||||
|
## <summary>
|
||||||
|
## Domain to transition to.
|
||||||
|
## </summary>
|
||||||
|
## </param>
|
||||||
|
#
|
||||||
|
interface(`mta_sendmail_domtrans',`
|
||||||
|
gen_require(`
|
||||||
|
type sendmail_exec_t;
|
||||||
|
')
|
||||||
|
|
||||||
|
files_search_usr($1)
|
||||||
|
corecmd_read_sbin_symlinks($1)
|
||||||
|
domain_auto_trans($1,sendmail_exec_t,$2)
|
||||||
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
## <summary>
|
## <summary>
|
||||||
## Execute sendmail in the caller domain.
|
## Execute sendmail in the caller domain.
|
||||||
@ -484,12 +519,13 @@ interface(`mta_send_mail',`
|
|||||||
## </summary>
|
## </summary>
|
||||||
## </param>
|
## </param>
|
||||||
#
|
#
|
||||||
interface(`mta_exec',`
|
interface(`mta_sendmail_exec',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
type sendmail_exec_t;
|
type sendmail_exec_t;
|
||||||
')
|
')
|
||||||
|
|
||||||
can_exec($1, sendmail_exec_t)
|
can_exec($1, sendmail_exec_t)
|
||||||
|
errprint(`bah $1'__endline__)
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
@ -28,12 +28,10 @@ interface(`sendmail_stub',`
|
|||||||
#
|
#
|
||||||
interface(`sendmail_domtrans',`
|
interface(`sendmail_domtrans',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
type sendmail_exec_t, sendmail_t;
|
type sendmail_t;
|
||||||
')
|
')
|
||||||
|
|
||||||
files_search_usr($1)
|
mta_sendmail_domtrans($1,sendmail_t)
|
||||||
corecmd_search_sbin($1)
|
|
||||||
domain_auto_trans($1,sendmail_exec_t,sendmail_t)
|
|
||||||
|
|
||||||
allow $1 sendmail_t:fd use;
|
allow $1 sendmail_t:fd use;
|
||||||
allow sendmail_t $1:fd use;
|
allow sendmail_t $1:fd use;
|
||||||
|
Loading…
Reference in New Issue
Block a user