31 lines
701 B
Plaintext
31 lines
701 B
Plaintext
|
# vim:syntax=apparmor
|
||
|
|
# Last Modified: Sun May 13 13:10:22 2007
|
||
|
|
#include <tunables/global>
|
||
|
|
|
||
|
|
/usr/sbin/exim flags=(complain) {
|
||
|
|
#include <abstractions/base>
|
||
|
|
#include <abstractions/nameservice>
|
||
|
|
|
||
|
|
capability chown,
|
||
|
|
capability dac_override,
|
||
|
|
capability fowner,
|
||
|
|
capability setgid,
|
||
|
|
capability setuid,
|
||
|
|
|
||
|
|
/etc/aliases r,
|
||
|
|
/etc/exim/** r,
|
||
|
|
/etc/greylistd/whitelist-hosts r,
|
||
|
|
/proc/*/mounts r,
|
||
|
|
/proc/loadavg r,
|
||
|
|
/proc/net/if_inet6 r,
|
||
|
|
/usr/lib/majordomo/wrapper px,
|
||
|
|
/usr/sbin/exim ixr,
|
||
|
|
/var/lib/greylistd/whitelist-hosts r,
|
||
|
|
/var/lib/majordomo/lists/* r,
|
||
|
|
/var/log/exim/*.log w,
|
||
|
|
/var/run/exim.pid w,
|
||
|
|
/var/run/greylistd/socket w,
|
||
|
|
/var/spool/exim/** rw,
|
||
|
|
/var/spool/mail/** lrw,
|
||
|
|
}
|