nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

postfix: allow smtpd to mmap SASL keytab files

Browse Source 
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
This commit is contained in:
Kenton Groombridge 2024-05-15 11:07:42 -04:00
parent 578375480d
commit 871f0b0dd7
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/postfix.te
View File

@ -844,7 +844,7 @@ optional_policy(`
optional_policy(` optional_policy(`
sasl_connect(postfix_smtpd_t) sasl_connect(postfix_smtpd_t)
sasl_read_keytab(postfix_smtpd_t) sasl_mmap_read_keytab(postfix_smtpd_t)
') ')
optional_policy(` optional_policy(`

19
policy/modules/services/sasl.if
View File

@ -38,6 +38,25 @@ interface(`sasl_read_keytab',`
read_files_pattern($1, saslauthd_keytab_t, saslauthd_keytab_t) read_files_pattern($1, saslauthd_keytab_t, saslauthd_keytab_t)
') ')
########################################
## <summary>
## Memory map and read SASL keytab files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`sasl_mmap_read_keytab',`
gen_require(`
type saslauthd_keytab_t;
')
files_search_etc($1)
mmap_read_files_pattern($1, saslauthd_keytab_t, saslauthd_keytab_t)
')
######################################## ########################################
## <summary> ## <summary>
## All of the rules required to ## All of the rules required to