Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t and allow it to
send and recieve smtp before queue content filter server packets.
Remove the policy that allows exim_t to bind tcp sockets to amavisd_send_port_t. This port
type is replaced by smtp_beforequeue_port_t.
Signed-off-by: Dominick Grift <[email protected]>
---
:100644 100644 fccf3f8... 59024a0... M policy/modules/services/exim.te
policy/modules/services/exim.te | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/policy/modules/services/exim.te b/policy/modules/services/exim.te
index fccf3f8..59024a0 100644
--- a/policy/modules/services/exim.te
+++ b/policy/modules/services/exim.te
@@ -86,6 +86,7 @@ corecmd_search_bin(exim_t)
corenet_all_recvfrom_unlabeled(exim_t)
corenet_all_recvfrom_netlabel(exim_t)
+corenet_sendrecv_smtp_beforequeue_server_packets(exim_t)
corenet_tcp_sendrecv_generic_if(exim_t)
corenet_udp_sendrecv_generic_if(exim_t)
corenet_tcp_sendrecv_generic_node(exim_t)
@@ -93,7 +94,7 @@ corenet_udp_sendrecv_generic_node(exim_t)
corenet_tcp_sendrecv_all_ports(exim_t)
corenet_tcp_bind_generic_node(exim_t)
corenet_tcp_bind_smtp_port(exim_t)
-corenet_tcp_bind_amavisd_send_port(exim_t)
+corenet_tcp_bind_smtp_beforequeue_port(exim_t)
corenet_tcp_connect_auth_port(exim_t)
corenet_tcp_connect_smtp_port(exim_t)
corenet_tcp_connect_ldap_port(exim_t)
--
1.7.0.1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100427/e23116fd/attachment.bin