From: dwalsh@redhat.com (Daniel J Walsh)
Date: Tue, 14 Oct 2008 16:06:55 -0400
Subject: [refpolicy] services_postfix.patch
Message-ID: <48F4FBDF.8090107@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_postfix.patch


Fix badly named interface

Add interface to manage private sockets

Remove labels from postcat and virtual since we don't want to transition

Add interface to transition to postdrop

Add boolean to write local mail spool

postfix_master needs to setrlimit

Needs to setattr on postfix_spool_maildrop dir

Can search var_lib

Connects to cyrus stream


Searches postgrey

cleanup reads mailman data files

local searches logs

local transitions to postdrop

local execs clamscan

Appends to mailman files

map needs dac_override and setuid

map manages mailman data

pipe setrlimit

pipe transitions to postdrop and dovecot deliver

pipe manages mail spool

pipe trnsitions to spamc

posdrop manages uucp spool

postqueue can be started by cron Snds ppp signals

smtp talks to dovecot auth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj0+98ACgkQrlYvE4MpobP80gCZARsJa1J8rG/IUKNxVvlM5xh/
pTAAoKUAqfXURL/j++atFHeEaB1kFDwC
=KinI
-----END PGP SIGNATURE-----