## Procmail mail delivery agent
########################################
##
## Execute procmail with a domain transition.
##
##
##
## Domain allowed to transition.
##
##
#
interface(`procmail_domtrans',`
gen_require(`
type procmail_exec_t, procmail_t;
')
files_search_usr($1)
corecmd_search_bin($1)
domtrans_pattern($1, procmail_exec_t, procmail_t)
')
########################################
##
## Execute procmail in the caller domain.
##
##
##
## Domain allowed access.
##
##
#
interface(`procmail_exec',`
gen_require(`
type procmail_exec_t;
')
files_search_usr($1)
corecmd_search_bin($1)
can_exec($1, procmail_exec_t)
')
########################################
##
## Read procmail tmp files.
##
##
##
## Domain allowed access.
##
##
#
interface(`procmail_read_tmp_files',`
gen_require(`
type procmail_tmp_t;
')
files_search_tmp($1)
allow $1 procmail_tmp_t:file read_file_perms;
')
########################################
##
## Read/write procmail tmp files.
##
##
##
## Domain allowed access.
##
##
#
interface(`procmail_rw_tmp_files',`
gen_require(`
type procmail_tmp_t;
')
files_search_tmp($1)
rw_files_pattern($1, procmail_tmp_t, procmail_tmp_t)
')
########################################
##
## Read procmail home directory content
##
##
##
## Domain allowed access.
##
##
#
interface(`procmail_read_home_files',`
gen_require(`
type procmail_home_t;
')
userdom_search_user_home_dirs($1)
read_files_pattern($1, procmail_home_t, procmail_home_t)
')