Refactored a lot of code to utilize appropriate interfaces
This commit is contained in:
parent
46d21f7099
commit
9573efec7b
1 changed files with 12 additions and 12 deletions
|
@ -1,26 +1,26 @@
|
|||
|
||||
module kolab-local 1.0.5;
|
||||
module kolab-local 1.0.20;
|
||||
|
||||
require {
|
||||
type cyrus_t;
|
||||
type spamc_exec_t;
|
||||
type spamd_var_lib_t;
|
||||
type etc_mail_t;
|
||||
type var_log_t;
|
||||
type init_t;
|
||||
type postfix_master_t;
|
||||
class file { read write append open execute execute_no_trans getattr ioctl };
|
||||
class dir { search };
|
||||
class file { read write append open execute execute_no_trans getattr ioctl lock execute_no_trans entrypoint };
|
||||
class lnk_file { getattr read };
|
||||
class dir { getattr search open read lock ioctl };
|
||||
class sock_file { getattr open read write append };
|
||||
class unix_stream_socket { connectto };
|
||||
}
|
||||
|
||||
#============= cyrus_t ==============
|
||||
allow cyrus_t init_t:file { read open };
|
||||
allow cyrus_t etc_mail_t:dir search;
|
||||
allow cyrus_t spamc_exec_t:file { read open execute execute_no_trans getattr ioctl };
|
||||
allow cyrus_t spamd_var_lib_t:dir search;
|
||||
domain_entry_file(cyrus_t, spamc_exec_t);
|
||||
|
||||
|
||||
#============= cyrus_t ==============
|
||||
mta_read_config(cyrus_t);
|
||||
spamassassin_read_lib_files(cyrus_t);
|
||||
mysql_stream_connect(cyrus_t);
|
||||
|
||||
#============= postfix_master_t ==============
|
||||
#allow postfix_master_t var_log_t:file { append open };
|
||||
allow postfix_master_t var_log_t:file { write open };
|
||||
|
||||
|
|
Loading…
Reference in a new issue