2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
apparmor/profiles/apparmor.d/usr.lib.dovecot.anvil
John Johansen 6e9ff1fa61 profiles: update the rest of the profiles to use @{exec_path}
Signed-off-by: John Johansen <john.johansen@canonical.com>
2025-05-09 03:53:05 -07:00

32 lines
881 B
Plaintext

# vim: ft=apparmor
# ------------------------------------------------------------------
#
# Copyright (C) 2013-2020 Christian Boltz
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
abi <abi/4.0>,
include <tunables/global>
profile dovecot-anvil /usr/lib*/dovecot/anvil {
include <abstractions/base>
include <abstractions/dovecot-common>
capability setuid,
capability sys_chroot,
unix (receive, send) type=stream peer=(label=dovecot),
@{run}/dovecot/anvil rw,
@{run}/dovecot/anvil-auth-penalty rw,
@{exec_path} mr,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/usr.lib.dovecot.anvil>
}