nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

postfix, sasl: allow postfix smtp daemon to read SASL keytab 

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-12-07 11:00:03 -05:00
parent d38a21388f
commit 2354b4f1be
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/services/postfix.te
View File

@ -839,6 +839,7 @@ optional_policy(`
optional_policy(` optional_policy(`
sasl_connect(postfix_smtpd_t) sasl_connect(postfix_smtpd_t)
sasl_read_keytab(postfix_smtpd_t)
') ')
optional_policy(` optional_policy(`

19
policy/modules/services/sasl.if
View File

@ -19,6 +19,25 @@ interface(`sasl_connect',`
stream_connect_pattern($1, saslauthd_runtime_t, saslauthd_runtime_t, saslauthd_t) stream_connect_pattern($1, saslauthd_runtime_t, saslauthd_runtime_t, saslauthd_t)
') ')
########################################
## <summary>
## Read SASL keytab files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`sasl_read_keytab',`
gen_require(`
type saslauthd_keytab_t;
')
files_search_etc($1)
read_files_pattern($1, saslauthd_keytab_t, saslauthd_keytab_t)
')
######################################## ########################################
## <summary> ## <summary>
## All of the rules required to ## All of the rules required to