diff --git a/refpolicy/policy/modules/services/postfix.if b/refpolicy/policy/modules/services/postfix.if index adde578..16b3eb2 100644 --- a/refpolicy/policy/modules/services/postfix.if +++ b/refpolicy/policy/modules/services/postfix.if @@ -16,6 +16,17 @@ interface(`postfix_stub',` ') ') +######################################## +## <summary> +## Creates types and rules for a basic +## postfix process domain. +## </summary> +## <param name="prefix"> +## <summary> +## Prefix for the domain. +## </summary> +## </param> +# template(`postfix_domain_template',` type postfix_$1_t; type postfix_$1_exec_t; @@ -100,6 +111,16 @@ template(`postfix_domain_template',` ') ') +######################################## +## <summary> +## Creates a postfix server process domain. +## </summary> +## <param name="prefix"> +## <summary> +## Prefix of the domain. +## </summary> +## </param> +# template(`postfix_server_domain_template',` postfix_domain_template($1) @@ -134,6 +155,17 @@ template(`postfix_server_domain_template',` ') ') +######################################## +## <summary> +## Creates a process domain for programs +## that are ran by users. +## </summary> +## <param name="prefix"> +## <summary> +## Prefix of the domain. +## </summary> +## </param> +# template(`postfix_user_domain_template',` gen_require(` attribute postfix_user_domains, postfix_user_domtrans; @@ -154,6 +186,22 @@ template(`postfix_user_domain_template',` domain_use_interactive_fds(postfix_$1_t) ') +######################################## +## <summary> +## The per-userdomain template for the postfix module. +## </summary> +## <param name="prefix"> +## <summary> +## The prefix of the user domain. +## (e.g., user is the prefix of user_t) +## </summary> +## </param> +## <param name="user_domain"> +## <summary> +## User domain type. +## </summary> +## </param> +# template(`postfix_per_userdomain_template',` gen_require(` attribute postfix_user_domains; @@ -167,12 +215,6 @@ template(`postfix_per_userdomain_template',` allow postfix_user_domains $2:fd use; ') -template(`postfix_public_domain_template',` - postfix_server_domain_template($1) - - allow postfix_$1_t postfix_public_t:dir search; -') - ######################################## ## <summary> ## Read postfix configuration files.