mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 18:17:09 +00:00
Code Issues Releases Wiki Activity

dovecot: allow FD passing between dovecot and dovecot's anvil

Browse Source
This commit is contained in:
Simon Deziel 2019-02-10 21:36:10 -05:00
parent f2c0a11327
commit a57f01d86b
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/usr.lib.dovecot.anvil
View File

@ -18,6 +18,8 @@
capability setuid, capability setuid,
capability sys_chroot, capability sys_chroot,
unix (receive, send) type=stream peer=(label=dovecot),
/run/dovecot/anvil rw, /run/dovecot/anvil rw,
/usr/lib/dovecot/anvil mr, /usr/lib/dovecot/anvil mr,

2
profiles/apparmor.d/usr.sbin.dovecot
View File

@ -33,6 +33,8 @@ profile dovecot /usr/{bin,sbin}/dovecot flags=(attach_disconnected) {
signal send set=(int,quit) peer=/usr/lib/dovecot/*, signal send set=(int,quit) peer=/usr/lib/dovecot/*,
unix (receive, send) type=stream peer=(label=/usr/lib/dovecot/anvil),
/etc/dovecot/** r, /etc/dovecot/** r,
/etc/mtab r, /etc/mtab r,
/etc/lsb-release r, /etc/lsb-release r,