[selinux-policy: 891/3172] fix up sendmail for targeted

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:22:04 UTC 2010


commit dc8f17037bdd21956b5643e561cd864d1172921d
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Oct 28 18:57:23 2005 +0000

    fix up sendmail for targeted

 refpolicy/policy/modules/services/sendmail.te |   16 +++++++++++-----
 1 files changed, 11 insertions(+), 5 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/sendmail.te b/refpolicy/policy/modules/services/sendmail.te
index c25dd75..9f4448b 100644
--- a/refpolicy/policy/modules/services/sendmail.te
+++ b/refpolicy/policy/modules/services/sendmail.te
@@ -6,11 +6,6 @@ policy_module(sendmail,1.0)
 # Declarations
 #
 
-type sendmail_t;
-mta_sendmail_mailserver(sendmail_t)
-mta_mailserver_delivery(sendmail_t)
-mta_mailserver_sender(sendmail_t)
-
 type sendmail_log_t;
 logging_log_file(sendmail_log_t)
 
@@ -20,6 +15,17 @@ files_tmp_file(sendmail_tmp_t)
 type sendmail_var_run_t;
 files_pid_file(sendmail_var_run_t)
 
+ifdef(`targeted_policy',`
+	unconfined_alias_domain(sendmail_t)
+	type sendmail_exec_t;
+	domain_entry_file(sendmail_t,sendmail_exec_t)
+',`
+	type sendmail_t;
+	mta_sendmail_mailserver(sendmail_t)
+	mta_mailserver_delivery(sendmail_t)
+	mta_mailserver_sender(sendmail_t)
+')
+
 ########################################
 #
 # Sendmail local policy


More information about the scm-commits mailing list