33 lines
1.0 KiB
Plaintext
33 lines
1.0 KiB
Plaintext
|
#DESC fetchmail - remote-mail retrieval utility
|
||
|
|
#
|
||
|
|
# Author: Greg Norris <haphazard@kc.rr.com>
|
||
|
|
# X-Debian-Packages: fetchmail
|
||
|
|
# Depends: mta.te
|
||
|
|
#
|
||
|
|
# Note: This policy is only required when running fetchmail in daemon mode.
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the fetchmail_t domain.
|
||
|
|
#
|
||
|
|
daemon_domain(fetchmail);
|
||
|
|
type fetchmail_etc_t, file_type, sysadmfile;
|
||
|
|
type fetchmail_uidl_cache_t, file_type, sysadmfile;
|
||
|
|
|
||
|
|
# misc. requirements
|
||
|
|
allow fetchmail_t self:process setrlimit;
|
||
|
|
|
||
|
|
# network-related goodies
|
||
|
|
can_network_client_tcp(fetchmail_t, { dns_port_t pop_port_t smtp_port_t })
|
||
|
|
can_network_udp(fetchmail_t, dns_port_t)
|
||
|
|
allow fetchmail_t port_type:tcp_socket name_connect;
|
||
|
|
|
||
|
|
allow fetchmail_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
allow fetchmail_t self:unix_stream_socket create_stream_socket_perms;
|
||
|
|
|
||
|
|
# file access
|
||
|
|
allow fetchmail_t etc_t:file r_file_perms;
|
||
|
|
allow fetchmail_t fetchmail_etc_t:file r_file_perms;
|
||
|
|
allow fetchmail_t mail_spool_t:dir search;
|
||
|
|
file_type_auto_trans(fetchmail_t, mail_spool_t, fetchmail_uidl_cache_t, file)
|