From: dwalsh@redhat.com (Daniel J Walsh)
Date: Thu, 12 Nov 2009 16:29:13 -0500
Subject: [refpolicy] services_dovecot.patch
Message-ID: <4AFC7E29.5010803@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_dovecot.patch

dovecot is dropping capabilities,

getattr on mounted file systems

dovecot auth sends itself signals and drops capabilities

reads users tmp files (kerberos tickets)


deliver_t needs to write to cifs and nfs homedir