Merge pull request #300 from cgzones/macro
postfixpolicyd: split multi-class rule
This commit is contained in:
commit
d655ae7afa
|
@ -37,7 +37,8 @@ allow postfix_policyd_t postfix_policyd_conf_t:lnk_file read_lnk_file_perms;
|
||||||
manage_files_pattern(postfix_policyd_t, postfix_policyd_runtime_t, postfix_policyd_runtime_t)
|
manage_files_pattern(postfix_policyd_t, postfix_policyd_runtime_t, postfix_policyd_runtime_t)
|
||||||
files_runtime_filetrans(postfix_policyd_t, postfix_policyd_runtime_t, file)
|
files_runtime_filetrans(postfix_policyd_t, postfix_policyd_runtime_t, file)
|
||||||
|
|
||||||
allow postfix_policyd_t postfix_policyd_tmp_t:{ file sock_file } manage_file_perms;
|
allow postfix_policyd_t postfix_policyd_tmp_t:file manage_file_perms;
|
||||||
|
allow postfix_policyd_t postfix_policyd_tmp_t:sock_file manage_sock_file_perms;
|
||||||
files_tmp_filetrans(postfix_policyd_t, postfix_policyd_tmp_t, { file sock_file })
|
files_tmp_filetrans(postfix_policyd_t, postfix_policyd_tmp_t, { file sock_file })
|
||||||
|
|
||||||
kernel_search_network_sysctl(postfix_policyd_t)
|
kernel_search_network_sysctl(postfix_policyd_t)
|
||||||
|
|
Loading…
Reference in New Issue