# vim:syntax=apparmor
# Last Modified: Sun May 13 13:10:22 2007
#include <tunables/global>

/usr/sbin/exim flags=(complain) {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability chown,
  capability dac_override,
  capability fowner,
  capability setgid,
  capability setuid,

  /etc/aliases r,
  /etc/exim/** r,
  /etc/greylistd/whitelist-hosts r,
  /proc/*/mounts r,
  /proc/loadavg r,
  /proc/net/if_inet6 r,
  /usr/lib/majordomo/wrapper px,
  /usr/sbin/exim ixr,
  /var/lib/greylistd/whitelist-hosts r,
  /var/lib/majordomo/lists/* r,
  /var/log/exim/*.log w,
  /var/run/exim.pid w,
  /var/run/greylistd/socket w,
  /var/spool/exim/** rw,
  /var/spool/mail/** lrw,
}