dovecot: allow dovecot-auth to read SASL keytab

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
2024-05-06 15:59:55 -04:00 · 2024-05-06 15:59:55 -04:00 · 03711caea1
parent cd781e783e
commit 03711caea1
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@ -321,6 +321,10 @@ optional_policy(`
 	postfix_search_spool(dovecot_auth_t)
 ')

+optional_policy(`
+	sasl_read_keytab(dovecot_auth_t)
+')
+
 optional_policy(`
        postgresql_unpriv_client(dovecot_auth_t)