apparmor/profiles/apparmor.d/program-chunks/postfix-common
Steve Beattie 7e6e37953f This patch adds a variable definition for the location of /proc in
tunables/proc and modifies all users of /proc to use the variable instead.

I also converted some uses of /proc/*/ to /proc/[0-9]*/ to be a
little more restrictive, as well as removing some references to proc
files that are already covered by abstractions/base (the removals in
abstractions/bash seem justified as all uses of abstractions/bash are
immediately preceded by abstractions/base).
2007-05-25 02:09:30 +00:00

25 lines
729 B
Text

# $Id$
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# used with postfix/*
capability setuid,
capability setgid,
capability sys_chroot,
/etc/postfix/*.cf r,
/etc/postfix/*.db r,
@{PROC}/net/if_inet6 r,
/usr/lib/postfix/*.so mr,
/usr/lib64/sasl2/* mr,
/usr/lib64/sasl2/ r,
/usr/lib/sasl2/* mr,
/usr/lib/sasl2/ r,