mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 10:07:12 +00:00
Code Issues Releases Wiki Activity

Profiles: dovecot add access for dovecot 2.4 doveconf paths

Browse Source
This commit is contained in:
Christian Pfeiffer 2025-07-13 00:26:49 +00:00
parent 0f76632aec
commit 021f701e59
No known key found for this signature in database
GPG Key ID: EE10C8754F8DD1EC
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/abstractions/dovecot-common
View File

@ -19,6 +19,8 @@
signal receive peer=dovecot, signal receive peer=dovecot,
owner @{run}/dovecot/config rw, owner @{run}/dovecot/config rw,
owner @{run}/dovecot/dovecot.conf.binary r,
owner /tmp/doveconf.* r,
# Include additions to the abstraction # Include additions to the abstraction
include if exists <abstractions/dovecot-common.d> include if exists <abstractions/dovecot-common.d>

2
profiles/apparmor.d/usr.lib.dovecot.config
View File

@ -28,6 +28,8 @@ profile dovecot-config /usr/lib*/dovecot/config {
/usr/lib*/dovecot/managesieve Px, /usr/lib*/dovecot/managesieve Px,
/usr/share/dovecot/** r, /usr/share/dovecot/** r,
/var/lib/dovecot/ssl-parameters.dat r, /var/lib/dovecot/ssl-parameters.dat r,
owner @{run}/dovecot/dovecot.conf.binary* rw,
owner /tmp/doveconf.* rw,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.
include if exists <local/usr.lib.dovecot.config> include if exists <local/usr.lib.dovecot.config>

1
profiles/apparmor.d/usr.sbin.dovecot
View File

@ -78,6 +78,7 @@ profile dovecot /usr/{bin,sbin}/dovecot flags=(attach_disconnected) {
@{run}/dovecot/ rw, @{run}/dovecot/ rw,
@{run}/dovecot/** rw, @{run}/dovecot/** rw,
link @{run}/dovecot/** -> /var/lib/dovecot/**, link @{run}/dovecot/** -> /var/lib/dovecot/**,
owner /tmp/doveconf.* rw,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.
include if exists <local/usr.sbin.dovecot> include if exists <local/usr.sbin.dovecot>