diff --git a/profiles/apparmor.d/usr.lib.dovecot.anvil b/profiles/apparmor.d/usr.lib.dovecot.anvil index aba8854e9..652f13443 100644 --- a/profiles/apparmor.d/usr.lib.dovecot.anvil +++ b/profiles/apparmor.d/usr.lib.dovecot.anvil @@ -18,6 +18,8 @@ capability setuid, capability sys_chroot, + unix (receive, send) type=stream peer=(label=dovecot), + /run/dovecot/anvil rw, /usr/lib/dovecot/anvil mr, diff --git a/profiles/apparmor.d/usr.sbin.dovecot b/profiles/apparmor.d/usr.sbin.dovecot index 8eced4a64..d6d50c5e7 100644 --- a/profiles/apparmor.d/usr.sbin.dovecot +++ b/profiles/apparmor.d/usr.sbin.dovecot @@ -33,6 +33,8 @@ profile dovecot /usr/{bin,sbin}/dovecot flags=(attach_disconnected) { signal send set=(int,quit) peer=/usr/lib/dovecot/*, + unix (receive, send) type=stream peer=(label=/usr/lib/dovecot/anvil), + /etc/dovecot/** r, /etc/mtab r, /etc/lsb-release r,