[selinux-policy: 3124/3172] These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:37:49 UTC 2010
commit 86225e1f160251004962d7b581f0a8ae3f0ca6ac
Author: Dominick Grift <domg472 at gmail.com>
Date: Fri Sep 24 09:51:02 2010 +0200
These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.
policy/modules/services/spamassassin.te | 8 ++------
1 files changed, 2 insertions(+), 6 deletions(-)
---
diff --git a/policy/modules/services/spamassassin.te b/policy/modules/services/spamassassin.te
index 9ad4eff..019f357 100644
--- a/policy/modules/services/spamassassin.te
+++ b/policy/modules/services/spamassassin.te
@@ -508,9 +508,7 @@ optional_policy(`
')
optional_policy(`
- corenet_tcp_connect_mysqld_port(spamd_t)
- corenet_sendrecv_mysqld_client_packets(spamd_t)
-
+ mysql_tcp_connect(spamd_t)
mysql_search_db(spamd_t)
mysql_stream_connect(spamd_t)
')
@@ -520,9 +518,7 @@ optional_policy(`
')
optional_policy(`
- corenet_tcp_connect_postgresql_port(spamd_t)
- corenet_sendrecv_postgresql_client_packets(spamd_t)
-
+ postgresql_tcp_connect(spamd_t)
postgresql_stream_connect(spamd_t)
')
More information about the scm-commits
mailing list