mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

dovecot: restrict access by owner to the dovecot/config socket

Browse source 
Being able to read the config means accessing ssl_key data so
should only be restricted to root https://wiki.dovecot.org/Services#config

Signed-off-by: Simon Deziel <simon@sdeziel.info>
This commit is contained in:
Simon Deziel 2019-02-18 09:53:39 -05:00
parent bc36daa264
commit e3fd962e36
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
profiles/apparmor.d/abstractions/dovecot-common
View file

@ -16,7 +16,7 @@
# dovecot's master can send us signals
signal receive peer=dovecot,
/{var/,}run/dovecot/config rw,
owner /{var/,}run/dovecot/config rw,
# Include additions to the abstraction
#include if exists <abstractions/dovecot-common.d>