diff --git a/profiles/apparmor.d/usr.lib.dovecot.auth b/profiles/apparmor.d/usr.lib.dovecot.auth index 6db41c65f..b47bc76ad 100644 --- a/profiles/apparmor.d/usr.lib.dovecot.auth +++ b/profiles/apparmor.d/usr.lib.dovecot.auth @@ -1,6 +1,7 @@ # ------------------------------------------------------------------ # # Copyright (C) 2013 Christian Boltz +# Copyright (C) 2014 Christian Wittmer # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public @@ -16,6 +17,7 @@ #include #include #include + #include #include capability audit_write, diff --git a/profiles/apparmor.d/usr.lib.dovecot.managesieve b/profiles/apparmor.d/usr.lib.dovecot.managesieve index 1010f3805..8ce9faed1 100644 --- a/profiles/apparmor.d/usr.lib.dovecot.managesieve +++ b/profiles/apparmor.d/usr.lib.dovecot.managesieve @@ -1,6 +1,7 @@ # ------------------------------------------------------------------ # # Copyright (C) 2013 Christian Boltz +# Copyright (C) 2014 Christian Wittmer # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public @@ -10,11 +11,20 @@ # vim: ft=apparmor #include +#include /usr/lib/dovecot/managesieve { #include #include + capability setuid, + + network inet stream, + network inet6 stream, + + @{DOVECOT_MAILSTORE}/ rw, + @{DOVECOT_MAILSTORE}/** rwkl, + /etc/dovecot/** r, /usr/bin/doveconf rix, /usr/lib/dovecot/managesieve mrix, diff --git a/profiles/apparmor.d/usr.lib.dovecot.managesieve-login b/profiles/apparmor.d/usr.lib.dovecot.managesieve-login index 4340b489d..a87ded6f6 100644 --- a/profiles/apparmor.d/usr.lib.dovecot.managesieve-login +++ b/profiles/apparmor.d/usr.lib.dovecot.managesieve-login @@ -3,6 +3,7 @@ # Copyright (c) 2009 Dulmandakh Sukhbaatar # Copyright (C) 2009-2011 Canonical Ltd. # Copyright (C) 2013 Christian Boltz +# Copyright (C) 2014 Christian Wittmer # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public @@ -23,6 +24,7 @@ capability sys_chroot, network inet stream, + network inet6 stream, /usr/lib/dovecot/managesieve-login mr, /{,var/}run/dovecot/login/ r,