fix sendmail_exec_t encapsulation breakage

This commit is contained in:
Chris PeBenito 2006-05-10 18:42:22 +00:00
parent ac9db9b54e
commit 88bc7af316
2 changed files with 39 additions and 5 deletions

View File

@ -474,6 +474,41 @@ interface(`mta_send_mail',`
allow mta_user_agent $1:fifo_file { read write };
')
########################################
## <summary>
## Execute send mail in a specified domain.
## </summary>
## <desc>
## <p>
## Execute send mail in a specified domain.
## </p>
## <p>
## No interprocess communication (signals, pipes,
## etc.) is provided by this interface since
## the domains are not owned by this module.
## </p>
## </desc>
## <param name="source_domain">
## <summary>
## Domain to transition from.
## </summary>
## </param>
## <param name="target_domain">
## <summary>
## Domain to transition to.
## </summary>
## </param>
#
interface(`mta_sendmail_domtrans',`
gen_require(`
type sendmail_exec_t;
')
files_search_usr($1)
corecmd_read_sbin_symlinks($1)
domain_auto_trans($1,sendmail_exec_t,$2)
')
########################################
## <summary>
## Execute sendmail in the caller domain.
@ -484,12 +519,13 @@ interface(`mta_send_mail',`
## </summary>
## </param>
#
interface(`mta_exec',`
interface(`mta_sendmail_exec',`
gen_require(`
type sendmail_exec_t;
')
can_exec($1, sendmail_exec_t)
errprint(`bah $1'__endline__)
')
########################################

View File

@ -28,12 +28,10 @@ interface(`sendmail_stub',`
#
interface(`sendmail_domtrans',`
gen_require(`
type sendmail_exec_t, sendmail_t;
type sendmail_t;
')
files_search_usr($1)
corecmd_search_sbin($1)
domain_auto_trans($1,sendmail_exec_t,sendmail_t)
mta_sendmail_domtrans($1,sendmail_t)
allow $1 sendmail_t:fd use;
allow sendmail_t $1:fd use;