RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

spamassassin: Move systemd interfaces. 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2020-04-09 09:32:25 -04:00
parent 47b44a0fc7
commit b2b385891d
1 changed files with 38 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

76
policy/modules/services/spamassassin.if
View File

@ -101,6 +101,44 @@ interface(`spamassassin_signal_spamd',`
allow $1 spamd_t:process signal;
')
########################################
## <summary>
## reload SA service
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`spamassassin_service_reload',`
gen_require(`
type spamassassin_unit_t;
')
allow $1 spamassassin_unit_t:service reload;
')
########################################
## <summary>
## Get SA service status
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`spamassassin_service_status',`
gen_require(`
type spamassassin_unit_t;
')
allow $1 spamassassin_unit_t:service status;
')
########################################
## <summary>
## Execute spamd in the caller domain.
@ -433,41 +471,3 @@ interface(`spamassassin_admin',`
# sa-update
spamassassin_run_update($1, $2)
')
########################################
## <summary>
## reload SA service
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`spamassassin_service_reload',`
gen_require(`
type spamassassin_unit_t;
')
allow $1 spamassassin_unit_t:service reload;
')
########################################
## <summary>
## Get SA service status
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`spamassassin_service_status',`
gen_require(`
type spamassassin_unit_t;
')
allow $1 spamassassin_unit_t:service status;
')