mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 14:25:52 +00:00
Code Issues Releases Wiki Activity

Allow to read icu *.dat files in postfix-related profiles

Browse Source 
This is needed for postdrop, postmap, postqueue and sendmail

Seen on openSUSE Tumbleweed.
This commit is contained in:
Christian Boltz
2020-05-24 15:22:41 +02:00
parent f891dad070
commit b23aa00b81
4 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor/profiles/extras/usr.sbin.postdrop
View File

@@ -26,6 +26,7 @@
/etc/postfix/postfix-script mixr,
@{PROC}/net/if_inet6 r,
/usr/sbin/postdrop rmix,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/var/spool/postfix r,
/var/spool/postfix/maildrop r,
/var/spool/postfix/maildrop/* rwl,

1
profiles/apparmor/profiles/extras/usr.sbin.postmap
View File

@@ -21,5 +21,6 @@
/etc/postfix/* r,
/etc/postfix/*.db rwlk,
@{PROC}/net/if_inet6 r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/sbin/postmap rmix,
}

1
profiles/apparmor/profiles/extras/usr.sbin.postqueue
View File

@@ -23,6 +23,7 @@
/etc/postfix r,
/usr/sbin/postqueue rmix,
/usr/lib/postfix/{bin/,sbin/,}showq Px,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/var/spool/postfix r,
/var/spool/postfix/maildrop r,
/var/spool/postfix/maildrop/* rwl,

1
profiles/apparmor/profiles/extras/usr.sbin.sendmail
View File

@@ -60,6 +60,7 @@
/usr/sbin/sendmail rmix,
/usr/sbin/sendmail.postfix rmix,
/usr/sbin/sendmail.sendmail rmix,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/var/lib/sendmail/statistics rwl,
/{,var/}run/sendmail.pid rwl,
/{,var/}run/sendmail/control rw,