rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

These are not declarations move them to local policy section.

Browse Source
This commit is contained in:
Dominick Grift 2010-09-23 13:55:58 +02:00
parent 9bd88470ac
commit f6e8660dcb
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
policy/modules/services/postfix.te
View File

@ -35,15 +35,6 @@ application_executable_file(postfix_exec_t)
postfix_server_domain_template(local) postfix_server_domain_template(local)
mta_mailserver_delivery(postfix_local_t) mta_mailserver_delivery(postfix_local_t)
# Handle vacation script
mta_send_mail(postfix_local_t)
userdom_read_user_home_content_files(postfix_local_t)
tunable_policy(`allow_postfix_local_write_mail_spool',`
mta_manage_spool(postfix_local_t)
')
# Program for creating database files # Program for creating database files
type postfix_map_t; type postfix_map_t;
type postfix_map_exec_t; type postfix_map_exec_t;
@ -315,11 +306,19 @@ mta_read_aliases(postfix_local_t)
mta_delete_spool(postfix_local_t) mta_delete_spool(postfix_local_t)
# For reading spamassasin # For reading spamassasin
mta_read_config(postfix_local_t) mta_read_config(postfix_local_t)
# Handle vacation script
mta_send_mail(postfix_local_t)
domtrans_pattern(postfix_local_t, postfix_postdrop_exec_t, postfix_postdrop_t) domtrans_pattern(postfix_local_t, postfix_postdrop_exec_t, postfix_postdrop_t)
# Might be a leak, but I need a postfix expert to explain # Might be a leak, but I need a postfix expert to explain
allow postfix_postdrop_t postfix_local_t:unix_stream_socket { read write }; allow postfix_postdrop_t postfix_local_t:unix_stream_socket { read write };
userdom_read_user_home_content_files(postfix_local_t)
tunable_policy(`allow_postfix_local_write_mail_spool',`
mta_manage_spool(postfix_local_t)
')
optional_policy(` optional_policy(`
clamav_search_lib(postfix_local_t) clamav_search_lib(postfix_local_t)
clamav_exec_clamscan(postfix_local_t) clamav_exec_clamscan(postfix_local_t)