mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-05 16:55:32 +00:00
Code Issues Releases Wiki Activity

profiles/postfix-master: grant signal+unix communication with children

Browse Source 
Grant the ability to communicate with the postfix named child profiles
via signals and unix sockets. Include the path-based match names as
a fallback on upgrades.

Signed-off-by: Steve Beattie <steve.beattie@canonical.com>
This commit is contained in:
Steve Beattie
2018-03-26 11:39:45 -07:00
parent 39ca2adff6
commit 35d84895fe
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
profiles/apparmor/profiles/extras/postfix.master
View File

@@ -20,6 +20,13 @@ profile postfix-master /usr/lib/postfix/{sbin/,}master {
capability kill,
capability dac_override,
signal send peer=/usr/lib/postfix/*,
signal send peer=postfix-*,
signal peer=@{profile_name},
unix (send receive) type=stream peer=(label=/usr/lib/postfix/*),
unix (send receive) type=stream peer=(label=postfix-*),
/etc/postfix/master.cf r,
/{var/spool/postfix/,}pid/master.pid rwk,
/{var/spool/postfix/,}private/* wl,