From f6e8660dcb26d7476965b584fb59474495e7409a Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sep 23 2010 12:55:33 +0000 Subject: These are not declarations move them to local policy section. --- diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te index 87043e1..ea6fa96 100644 --- a/policy/modules/services/postfix.te +++ b/policy/modules/services/postfix.te @@ -35,15 +35,6 @@ application_executable_file(postfix_exec_t) postfix_server_domain_template(local) mta_mailserver_delivery(postfix_local_t) -# Handle vacation script -mta_send_mail(postfix_local_t) - -userdom_read_user_home_content_files(postfix_local_t) - -tunable_policy(`allow_postfix_local_write_mail_spool',` - mta_manage_spool(postfix_local_t) -') - # Program for creating database files type postfix_map_t; type postfix_map_exec_t; @@ -315,11 +306,19 @@ mta_read_aliases(postfix_local_t) mta_delete_spool(postfix_local_t) # For reading spamassasin mta_read_config(postfix_local_t) +# Handle vacation script +mta_send_mail(postfix_local_t) domtrans_pattern(postfix_local_t, postfix_postdrop_exec_t, postfix_postdrop_t) # Might be a leak, but I need a postfix expert to explain allow postfix_postdrop_t postfix_local_t:unix_stream_socket { read write }; +userdom_read_user_home_content_files(postfix_local_t) + +tunable_policy(`allow_postfix_local_write_mail_spool',` + mta_manage_spool(postfix_local_t) +') + optional_policy(` clamav_search_lib(postfix_local_t) clamav_exec_clamscan(postfix_local_t)