[selinux-policy: 891/3172] fix up sendmail for targeted
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 20:22:04 UTC 2010
commit dc8f17037bdd21956b5643e561cd864d1172921d
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Fri Oct 28 18:57:23 2005 +0000
fix up sendmail for targeted
refpolicy/policy/modules/services/sendmail.te | 16 +++++++++++-----
1 files changed, 11 insertions(+), 5 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/sendmail.te b/refpolicy/policy/modules/services/sendmail.te
index c25dd75..9f4448b 100644
--- a/refpolicy/policy/modules/services/sendmail.te
+++ b/refpolicy/policy/modules/services/sendmail.te
@@ -6,11 +6,6 @@ policy_module(sendmail,1.0)
# Declarations
#
-type sendmail_t;
-mta_sendmail_mailserver(sendmail_t)
-mta_mailserver_delivery(sendmail_t)
-mta_mailserver_sender(sendmail_t)
-
type sendmail_log_t;
logging_log_file(sendmail_log_t)
@@ -20,6 +15,17 @@ files_tmp_file(sendmail_tmp_t)
type sendmail_var_run_t;
files_pid_file(sendmail_var_run_t)
+ifdef(`targeted_policy',`
+ unconfined_alias_domain(sendmail_t)
+ type sendmail_exec_t;
+ domain_entry_file(sendmail_t,sendmail_exec_t)
+',`
+ type sendmail_t;
+ mta_sendmail_mailserver(sendmail_t)
+ mta_mailserver_delivery(sendmail_t)
+ mta_mailserver_sender(sendmail_t)
+')
+
########################################
#
# Sendmail local policy
More information about the scm-commits
mailing list