diff --git a/kolab-local.te b/kolab-local.te index e5a8fd6..03a0706 100644 --- a/kolab-local.te +++ b/kolab-local.te @@ -1,26 +1,26 @@ -module kolab-local 1.0.5; +module kolab-local 1.0.20; require { type cyrus_t; type spamc_exec_t; - type spamd_var_lib_t; - type etc_mail_t; type var_log_t; - type init_t; type postfix_master_t; - class file { read write append open execute execute_no_trans getattr ioctl }; - class dir { search }; + class file { read write append open execute execute_no_trans getattr ioctl lock execute_no_trans entrypoint }; + class lnk_file { getattr read }; + class dir { getattr search open read lock ioctl }; + class sock_file { getattr open read write append }; + class unix_stream_socket { connectto }; } -#============= cyrus_t ============== -allow cyrus_t init_t:file { read open }; -allow cyrus_t etc_mail_t:dir search; -allow cyrus_t spamc_exec_t:file { read open execute execute_no_trans getattr ioctl }; -allow cyrus_t spamd_var_lib_t:dir search; +domain_entry_file(cyrus_t, spamc_exec_t); +#============= cyrus_t ============== +mta_read_config(cyrus_t); +spamassassin_read_lib_files(cyrus_t); +mysql_stream_connect(cyrus_t); + #============= postfix_master_t ============== -#allow postfix_master_t var_log_t:file { append open }; allow postfix_master_t var_log_t:file { write open };