mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-01 14:55:10 +00:00
Merge branch 'cboltz-dovecot' into 'master'
Update /usr/lib/dovecot/* profiles See merge request apparmor/apparmor!42 Acked-by: John Johansen <john.johansen@canonical.com> (cherry picked from commitf8b208ee80
)06928db1
Update /usr/lib/dovecot/* profiles
This commit is contained in:
committed by
Christian Boltz
parent
14ce11f608
commit
8518a39a4b
@@ -15,6 +15,7 @@
|
|||||||
#include <abstractions/base>
|
#include <abstractions/base>
|
||||||
#include <abstractions/mysql>
|
#include <abstractions/mysql>
|
||||||
#include <abstractions/nameservice>
|
#include <abstractions/nameservice>
|
||||||
|
#include <abstractions/openssl>
|
||||||
#include <abstractions/dovecot-common>
|
#include <abstractions/dovecot-common>
|
||||||
|
|
||||||
capability setuid,
|
capability setuid,
|
||||||
|
@@ -32,6 +32,8 @@
|
|||||||
/etc/dovecot/conf.d/ r,
|
/etc/dovecot/conf.d/ r,
|
||||||
/etc/dovecot/conf.d/** r,
|
/etc/dovecot/conf.d/** r,
|
||||||
|
|
||||||
|
owner /tmp/dovecot.imap.* rw,
|
||||||
|
|
||||||
/usr/bin/doveconf rix,
|
/usr/bin/doveconf rix,
|
||||||
/usr/lib/dovecot/imap mrix,
|
/usr/lib/dovecot/imap mrix,
|
||||||
/usr/share/dovecot/** r,
|
/usr/share/dovecot/** r,
|
||||||
|
@@ -27,6 +27,7 @@
|
|||||||
network inet6 stream,
|
network inet6 stream,
|
||||||
|
|
||||||
/usr/lib/dovecot/managesieve-login mr,
|
/usr/lib/dovecot/managesieve-login mr,
|
||||||
|
/{,var/}run/dovecot/login-master-notify* rw,
|
||||||
/{,var/}run/dovecot/login/ r,
|
/{,var/}run/dovecot/login/ r,
|
||||||
/{,var/}run/dovecot/login/* rw,
|
/{,var/}run/dovecot/login/* rw,
|
||||||
|
|
||||||
|
@@ -23,6 +23,7 @@
|
|||||||
capability sys_chroot,
|
capability sys_chroot,
|
||||||
|
|
||||||
/usr/lib/dovecot/pop3-login mr,
|
/usr/lib/dovecot/pop3-login mr,
|
||||||
|
/{,var/}run/dovecot/anvil rw,
|
||||||
/{,var/}run/dovecot/login/ r,
|
/{,var/}run/dovecot/login/ r,
|
||||||
/{,var/}run/dovecot/login/* rw,
|
/{,var/}run/dovecot/login/* rw,
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user