RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'dovecot' of git://github.com/alexminder/refpolicy

This commit is contained in:
Chris PeBenito 2019-01-23 18:52:35 -05:00
parent 08cb521ab0 de478dca3a
commit fce54c10fa
1 changed files with 34 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
policy/modules/services/dovecot.te
View File

@ -5,6 +5,14 @@ policy_module(dovecot, 1.21.0)
# Declarations
#
## <desc>
## <p>
## Determine whether dovecot can connect to
## databases.
## </p>
## </desc>
gen_tunable(dovecot_can_connect_db, false)
attribute dovecot_domain;
type dovecot_t, dovecot_domain;
@ -268,6 +276,18 @@ seutil_search_default_contexts(dovecot_auth_t)
sysnet_use_ldap(dovecot_auth_t)
tunable_policy(`dovecot_can_connect_db',`
corenet_sendrecv_gds_db_client_packets(dovecot_auth_t)
corenet_tcp_connect_gds_db_port(dovecot_auth_t)
corenet_tcp_sendrecv_gds_db_port(dovecot_auth_t)
corenet_sendrecv_mssql_client_packets(dovecot_auth_t)
corenet_tcp_connect_mssql_port(dovecot_auth_t)
corenet_tcp_sendrecv_mssql_port(dovecot_auth_t)
corenet_sendrecv_oracledb_client_packets(dovecot_auth_t)
corenet_tcp_connect_oracledb_port(dovecot_auth_t)
corenet_tcp_sendrecv_oracledb_port(dovecot_auth_t)
')
optional_policy(`
userdom_list_user_tmp(dovecot_auth_t)
userdom_read_user_tmp_files(dovecot_auth_t)
@ -275,9 +295,20 @@ optional_policy(`
')
optional_policy(`
mysql_stream_connect(dovecot_auth_t)
mysql_read_config(dovecot_auth_t)
mysql_tcp_connect(dovecot_auth_t)
tunable_policy(`dovecot_can_connect_db',`
mysql_stream_connect(dovecot_auth_t)
mysql_read_config(dovecot_auth_t)
mysql_tcp_connect(dovecot_auth_t)
')
')
optional_policy(`
postgresql_unpriv_client(dovecot_auth_t)
tunable_policy(`dovecot_can_connect_db',`
postgresql_stream_connect(dovecot_auth_t)
postgresql_tcp_connect(dovecot_auth_t)
')
')
optional_policy(`