mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 13:28:19 +00:00
Code Issues Releases Wiki Activity

allow dac_read_search and dac_override for dovecot/auth

Browse Source 
This is needed for:
- /var/spool/postfix/private/ (postfix:root 700) -> dac_read_search
- /run/dovecot/auth-worker (dovecot:root 600) -> dac_override

References: https://bugzilla.opensuse.org/show_bug.cgi?id=1069470
This commit is contained in:
Christian Boltz 2017-11-26 16:38:06 +01:00
parent 4b8b08562a
commit 6f6b3c57fb
No known key found for this signature in database
GPG Key ID: C6A682EA63C82F1C
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/usr.lib.dovecot.auth
View File

@ -22,6 +22,8 @@
#include <abstractions/dovecot-common>
capability audit_write,
capability dac_override,
capability dac_read_search,
capability setuid,
/etc/my.cnf r,