forked from pool/selinux-policy
50 lines
3.0 KiB
Diff
50 lines
3.0 KiB
Diff
Index: serefpolicy-contrib-20140730/postfix.te
|
|
===================================================================
|
|
--- serefpolicy-contrib-20140730.orig/postfix.te
|
|
+++ serefpolicy-contrib-20140730/postfix.te
|
|
@@ -132,6 +132,9 @@ allow postfix_master_t postfix_map_exec_
|
|
|
|
allow postfix_master_t postfix_postqueue_exec_t:file getattr_file_perms;
|
|
|
|
+allow postfix_master_t var_run_t:sock_file write;
|
|
+files_rw_inherited_generic_pid_files(postfix_master_t)
|
|
+
|
|
manage_files_pattern(postfix_master_t, postfix_private_t, postfix_private_t)
|
|
manage_fifo_files_pattern(postfix_master_t, postfix_private_t, postfix_private_t)
|
|
manage_sock_files_pattern(postfix_master_t, postfix_private_t, postfix_private_t)
|
|
Index: serefpolicy-contrib-20140730/postfix.fc
|
|
===================================================================
|
|
--- serefpolicy-contrib-20140730.orig/postfix.fc
|
|
+++ serefpolicy-contrib-20140730/postfix.fc
|
|
@@ -1,22 +1,6 @@
|
|
# postfix
|
|
/etc/rc\.d/init\.d/postfix -- gen_context(system_u:object_r:postfix_initrc_exec_t,s0)
|
|
/etc/postfix.* gen_context(system_u:object_r:postfix_etc_t,s0)
|
|
-ifdef(`distro_redhat', `
|
|
-/usr/libexec/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
|
|
-/usr/libexec/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
|
|
-/usr/libexec/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
|
|
-/usr/libexec/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
|
|
-/usr/libexec/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
|
|
-/usr/libexec/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
|
|
-/usr/libexec/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
|
|
-/usr/libexec/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
|
|
-/usr/libexec/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
|
|
-/usr/libexec/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
|
|
-/usr/libexec/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
|
|
-/usr/libexec/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
|
|
-/usr/libexec/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
|
|
-/usr/libexec/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
|
|
-', `
|
|
/usr/lib/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
|
|
/usr/lib/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
|
|
/usr/lib/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
|
|
@@ -30,7 +14,6 @@ ifdef(`distro_redhat', `
|
|
/usr/lib/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
|
|
/usr/lib/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
|
|
/usr/lib/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
|
|
-')
|
|
/etc/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
|
|
/etc/postfix/prng_exch -- gen_context(system_u:object_r:postfix_prng_t,s0)
|
|
/usr/sbin/postalias -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
|