mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 16:35:02 +01:00
1395a86f84
Add several permissions to the dovecot profiles that are needed on ubuntu
(surprisingly not on openSUSE, maybe it depends on the dovecot config?)
As discussed some weeks ago, the added permissions use only /run/
instead of /{var/,}run/ (which is hopefully superfluous nowadays).
References: https://bugs.launchpad.net/apparmor/+bug/1512131
Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk, 2.10 and 2.9.
26 lines
741 B
Text
26 lines
741 B
Text
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2013 Christian Boltz
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
# vim: ft=apparmor
|
|
|
|
#include <tunables/global>
|
|
|
|
/usr/lib/dovecot/anvil {
|
|
#include <abstractions/base>
|
|
#include <abstractions/dovecot-common>
|
|
|
|
capability setuid,
|
|
capability sys_chroot,
|
|
|
|
/run/dovecot/anvil rw,
|
|
/usr/lib/dovecot/anvil mr,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
#include <local/usr.lib.dovecot.anvil>
|
|
}
|