Changeset 2731

Timestamp:

06/24/08 08:21:35 (2 months ago)

Author:

cpebenito

Message:

trunk: Patch to handle postfix data_directory from Vaclav Ovsik.

Files:

• trunk/Changelog (modified) (1 diff)
• trunk/policy/modules/services/postfix.fc (modified) (1 diff)
• trunk/policy/modules/services/postfix.te (modified) (3 diffs)

trunk/Changelog

@@ +1 @@
+- Patch to handle postfix data_directory from Vaclav Ovsik.
-- SE-Postgresql policy from KaiGai Kohei.
-- Patch for X.org dbus support from Martin Orr.

trunk/policy/modules/services/postfix.fc

@@ -44 +44 @@
-/usr/sbin/postqueue     --      gen_context(system_u:object_r:postfix_postqueue_exec_t,s0)
-/usr/sbin/postsuper     --      gen_context(system_u:object_r:postfix_master_exec_t,s0)
+
+/var/lib/postfix(/.*)?          gen_context(system_u:object_r:postfix_data_t,s0)
+
-/var/spool/postfix(/.*)?                gen_context(system_u:object_r:postfix_spool_t,s0)
-/var/spool/postfix/maildrop(/.*)? gen_context(system_u:object_r:postfix_spool_maildrop_t,s0)

trunk/policy/modules/services/postfix.te

@@ -1 +1 @@
-
-1.8.0
+ 1.8.1
-
-########################################
@@ -84 +84 @@
-files_pid_file(postfix_var_run_t)
-
+# the data_directory config parameter
+type postfix_data_t;
+files_type(postfix_data_t)
+
-postfix_server_domain_template(virtual)
-mta_mailserver_delivery(postfix_virtual_t)
@@ -104 +108 @@
-
-can_exec(postfix_master_t,postfix_exec_t)
+
+allow postfix_master_t postfix_data_t:dir manage_dir_perms;
+allow postfix_master_t postfix_data_t:file manage_file_perms;
-
-allow postfix_master_t postfix_map_exec_t:file { mmap_file_perms ioctl lock };