Blame policy/modules/services/dkim.te
|
Chris PeBenito |
5a6b1f |
policy_module(dkim, 1.0.0)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
########################################
|
|
Chris PeBenito |
5a6b1f |
#
|
|
Chris PeBenito |
5a6b1f |
# Declarations
|
|
Chris PeBenito |
5a6b1f |
#
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
milter_template(dkim)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
# Type for the private key of dkim-filter
|
|
Chris PeBenito |
5a6b1f |
type dkim_milter_private_key_t;
|
|
Chris PeBenito |
5a6b1f |
files_type(dkim_milter_private_key_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
########################################
|
|
Chris PeBenito |
5a6b1f |
#
|
|
Chris PeBenito |
5a6b1f |
# Local policy
|
|
Chris PeBenito |
5a6b1f |
#
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
allow dkim_milter_t self:capability { setgid setuid };
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
read_files_pattern(dkim_milter_t, dkim_milter_private_key_t, dkim_milter_private_key_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
kernel_read_kernel_sysctls(dkim_milter_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
dev_read_urand(dkim_milter_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
files_read_etc_files(dkim_milter_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
sysnet_dns_name_resolve(dkim_milter_t)
|
|
Chris PeBenito |
5a6b1f |
|
|
Chris PeBenito |
5a6b1f |
mta_read_config(dkim_milter_t)
|