diff --git a/refpolicy/policy/modules/services/postfix.if b/refpolicy/policy/modules/services/postfix.if index adde578..16b3eb2 100644 --- a/refpolicy/policy/modules/services/postfix.if +++ b/refpolicy/policy/modules/services/postfix.if @@ -16,6 +16,17 @@ interface(`postfix_stub',` ') ') +######################################## +## +## Creates types and rules for a basic +## postfix process domain. +## +## +## +## Prefix for the domain. +## +## +# template(`postfix_domain_template',` type postfix_$1_t; type postfix_$1_exec_t; @@ -100,6 +111,16 @@ template(`postfix_domain_template',` ') ') +######################################## +## +## Creates a postfix server process domain. +## +## +## +## Prefix of the domain. +## +## +# template(`postfix_server_domain_template',` postfix_domain_template($1) @@ -134,6 +155,17 @@ template(`postfix_server_domain_template',` ') ') +######################################## +## +## Creates a process domain for programs +## that are ran by users. +## +## +## +## Prefix of the domain. +## +## +# template(`postfix_user_domain_template',` gen_require(` attribute postfix_user_domains, postfix_user_domtrans; @@ -154,6 +186,22 @@ template(`postfix_user_domain_template',` domain_use_interactive_fds(postfix_$1_t) ') +######################################## +## +## The per-userdomain template for the postfix module. +## +## +## +## The prefix of the user domain. +## (e.g., user is the prefix of user_t) +## +## +## +## +## User domain type. +## +## +# template(`postfix_per_userdomain_template',` gen_require(` attribute postfix_user_domains; @@ -167,12 +215,6 @@ template(`postfix_per_userdomain_template',` allow postfix_user_domains $2:fd use; ') -template(`postfix_public_domain_template',` - postfix_server_domain_template($1) - - allow postfix_$1_t postfix_public_t:dir search; -') - ######################################## ## ## Read postfix configuration files.