From 87a9469fc93911da631ef7c7d51a4bc00d17f45c Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Apr 27 2010 14:31:47 +0000
Subject: Add networking rules for spamd to connect to mysql/postgresql over the network, from Chris St. Pierre.


---

diff --git a/policy/modules/services/spamassassin.te b/policy/modules/services/spamassassin.te
index dd49d31..3bf33a2 100644
--- a/policy/modules/services/spamassassin.te
+++ b/policy/modules/services/spamassassin.te
@@ -1,5 +1,5 @@
 
-policy_module(spamassassin, 2.2.0)
+policy_module(spamassassin, 2.2.1)
 
 ########################################
 #
@@ -410,6 +410,9 @@ optional_policy(`
 ')
 
 optional_policy(`
+	corenet_tcp_connect_mysqld_port(spamd_t)
+	corenet_sendrecv_mysqld_client_packets(spamd_t)
+
 	mysql_search_db(spamd_t)
 	mysql_stream_connect(spamd_t)
 ')
@@ -423,6 +426,9 @@ optional_policy(`
 ')
 
 optional_policy(`
+	corenet_tcp_connect_postgresql_port(spamd_t)
+	corenet_sendrecv_postgresql_client_packets(spamd_t)
+
 	postgresql_stream_connect(spamd_t)
 ')