From b36824efdf4da9b79b57ff0ce4578c38028aa5ac Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sep 15 2010 15:42:28 +0000 Subject: Permit fetchmail_admin to ptrace and signal the fetchmail_t domain. Signed-off-by: Dominick Grift --- diff --git a/policy/modules/services/fetchmail.if b/policy/modules/services/fetchmail.if index 6537214..7d64c0a 100644 --- a/policy/modules/services/fetchmail.if +++ b/policy/modules/services/fetchmail.if @@ -18,6 +18,7 @@ interface(`fetchmail_admin',` type fetchmail_var_run_t; ') + allow $1 fetchmail_t:process { ptrace signal_perms }; ps_process_pattern($1, fetchmail_t) files_list_etc($1)