diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te index bee637144..f23cee27d 100644 --- a/policy/modules/services/dovecot.te +++ b/policy/modules/services/dovecot.te @@ -288,12 +288,6 @@ tunable_policy(`dovecot_can_connect_db',` corenet_tcp_sendrecv_oracledb_port(dovecot_auth_t) ') -optional_policy(` - userdom_list_user_tmp(dovecot_auth_t) - userdom_read_user_tmp_files(dovecot_auth_t) - userdom_read_user_tmp_symlinks(dovecot_auth_t) -') - optional_policy(` tunable_policy(`dovecot_can_connect_db',` mysql_stream_connect(dovecot_auth_t) @@ -302,6 +296,15 @@ optional_policy(` ') ') +optional_policy(` + nis_authenticate(dovecot_auth_t) +') + +optional_policy(` + postfix_manage_private_sockets(dovecot_auth_t) + postfix_search_spool(dovecot_auth_t) +') + optional_policy(` postgresql_unpriv_client(dovecot_auth_t) @@ -312,12 +315,9 @@ optional_policy(` ') optional_policy(` - nis_authenticate(dovecot_auth_t) -') - -optional_policy(` - postfix_manage_private_sockets(dovecot_auth_t) - postfix_search_spool(dovecot_auth_t) + userdom_list_user_tmp(dovecot_auth_t) + userdom_read_user_tmp_files(dovecot_auth_t) + userdom_read_user_tmp_symlinks(dovecot_auth_t) ') ########################################