apparmor/profiles/apparmor.d/abstractions/postfix-common

# ------------------------------------------------------------------
#
#    Copyright (C) 2002-2005 Novell/SUSE
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# used with postfix/*


  capability            setuid,
  capability            setgid,
  capability            sys_chroot,

  /etc/postfix/*.cf     r,
  /etc/postfix/*.db     r,
  @{PROC}/net/if_inet6  r,
  /usr/lib/postfix/*.so mr,
  /usr/lib64/sasl2/*    mr,
  /usr/lib64/sasl2/     r,
  /usr/lib/sasl2/*      mr,
  /usr/lib/sasl2/       r,
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381. 2006-04-11 21:52:54 +00:00			`# ------------------------------------------------------------------`
			`#`
			`# Copyright (C) 2002-2005 Novell/SUSE`
			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`
			`# used with postfix/*`


			`capability setuid,`
			`capability setgid,`
r3527@dhcp-81: root \| 2006-08-02 15:33:07 -0700 Fix up the m, U, and P stuff, and other misc fixes 2006-08-04 18:13:59 +00:00			`capability sys_chroot,`
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381. 2006-04-11 21:52:54 +00:00
			`/etc/postfix/*.cf r,`
https://bugzilla.novell.com/show_bug.cgi?id=178073 add full /etc/postfix/*.db read access to all postfix programs. This is just easier. Also let the smtp portion write to the rewrite pipe. 2006-10-18 20:13:42 +00:00			`/etc/postfix/*.db r,`
This patch adds a variable definition for the location of /proc in tunables/proc and modifies all users of /proc to use the variable instead. I also converted some uses of /proc// to /proc/[0-9]/ to be a little more restrictive, as well as removing some references to proc files that are already covered by abstractions/base (the removals in abstractions/bash seem justified as all uses of abstractions/bash are immediately preceded by abstractions/base). 2007-05-25 02:09:30 +00:00			`@{PROC}/net/if_inet6 r,`
r3527@dhcp-81: root \| 2006-08-02 15:33:07 -0700 Fix up the m, U, and P stuff, and other misc fixes 2006-08-04 18:13:59 +00:00			`/usr/lib/postfix/*.so mr,`
			`/usr/lib64/sasl2/* mr,`
Adapt abstractions and some profiles in active/ to the new syntax. 2007-04-10 22:05:33 +00:00			`/usr/lib64/sasl2/ r,`
r3527@dhcp-81: root \| 2006-08-02 15:33:07 -0700 Fix up the m, U, and P stuff, and other misc fixes 2006-08-04 18:13:59 +00:00			`/usr/lib/sasl2/* mr,`
Adapt abstractions and some profiles in active/ to the new syntax. 2007-04-10 22:05:33 +00:00			`/usr/lib/sasl2/ r,`