2015-11-13 23:16:19 -05:00
|
|
|
|
2015-11-14 00:52:13 -05:00
|
|
|
module kolab-local 1.0.20;
|
2015-11-13 23:16:19 -05:00
|
|
|
|
|
|
|
require {
|
|
|
|
type cyrus_t;
|
|
|
|
type spamc_exec_t;
|
|
|
|
type var_log_t;
|
|
|
|
type postfix_master_t;
|
2015-11-14 00:52:13 -05:00
|
|
|
class file { read write append open execute execute_no_trans getattr ioctl lock execute_no_trans entrypoint };
|
|
|
|
class lnk_file { getattr read };
|
|
|
|
class dir { getattr search open read lock ioctl };
|
|
|
|
class sock_file { getattr open read write append };
|
|
|
|
class unix_stream_socket { connectto };
|
2015-11-13 23:16:19 -05:00
|
|
|
}
|
|
|
|
|
2015-11-14 00:52:13 -05:00
|
|
|
domain_entry_file(cyrus_t, spamc_exec_t);
|
|
|
|
|
2015-11-13 23:16:19 -05:00
|
|
|
|
2015-11-14 00:52:13 -05:00
|
|
|
#============= cyrus_t ==============
|
|
|
|
mta_read_config(cyrus_t);
|
|
|
|
spamassassin_read_lib_files(cyrus_t);
|
|
|
|
mysql_stream_connect(cyrus_t);
|
2015-11-13 23:16:19 -05:00
|
|
|
|
|
|
|
#============= postfix_master_t ==============
|
|
|
|
allow postfix_master_t var_log_t:file { write open };
|
|
|
|
|