From 1909ca0dcb1e7293a8eaef04a86f08f42c7beaf3 Mon Sep 17 00:00:00 2001
From: Julian Andres Klode <jak@jak-linux.org>
Date: Fri, 30 Nov 2018 14:23:34 +0100
Subject: [PATCH] postfix.tlsmgr: Connect to urandom and prng exchange

(cherry picked from commit e8841a09537959d1209613d55a10f8d14c1c7290)
---
 profiles/apparmor/profiles/extras/postfix.tlsmgr | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/profiles/apparmor/profiles/extras/postfix.tlsmgr b/profiles/apparmor/profiles/extras/postfix.tlsmgr
index 8603f2b3c..cb803d7e9 100644
--- a/profiles/apparmor/profiles/extras/postfix.tlsmgr
+++ b/profiles/apparmor/profiles/extras/postfix.tlsmgr
@@ -19,8 +19,11 @@ profile postfix-tlsmgr /usr/lib/postfix/{sbin/,}tlsmgr {
 
   /usr/lib/postfix/{sbin/,}tlsmgr          rmix,
 
-  /etc/postfix/prng_exch            rw,
-  /{var/spool/postfix/,}private/tlsmgr r,
+  /var/spool/postfix/dev/urandom r,
+  /{etc,var/lib}/postfix/prng_exch            rwk,
+  /{var/spool/postfix/,}private/tlsmgr rw,
   /{,var/}run/__db.smtpd_tls_session_cache.db rw,
   /{,var/}run/smtpd_tls_session_cache.db rw,
+  /var/lib/postfix/smtpd_scache.db rwk,
+  /var/lib/postfix/smtp_scache.db rwk,
 }