From: domg472@gmail.com (Dominick Grift) Date: Tue, 27 Apr 2010 13:57:19 +0200 Subject: [refpolicy] [ Implement ClamSMTPd policy. 4/5] Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t. Message-ID: <20100427115716.GA307@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t and allow it to send and recieve smtp before queue content filter server packets. Remove the policy that allows exim_t to bind tcp sockets to amavisd_send_port_t. This port type is replaced by smtp_beforequeue_port_t. Signed-off-by: Dominick Grift --- :100644 100644 fccf3f8... 59024a0... M policy/modules/services/exim.te policy/modules/services/exim.te | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/policy/modules/services/exim.te b/policy/modules/services/exim.te index fccf3f8..59024a0 100644 --- a/policy/modules/services/exim.te +++ b/policy/modules/services/exim.te @@ -86,6 +86,7 @@ corecmd_search_bin(exim_t) corenet_all_recvfrom_unlabeled(exim_t) corenet_all_recvfrom_netlabel(exim_t) +corenet_sendrecv_smtp_beforequeue_server_packets(exim_t) corenet_tcp_sendrecv_generic_if(exim_t) corenet_udp_sendrecv_generic_if(exim_t) corenet_tcp_sendrecv_generic_node(exim_t) @@ -93,7 +94,7 @@ corenet_udp_sendrecv_generic_node(exim_t) corenet_tcp_sendrecv_all_ports(exim_t) corenet_tcp_bind_generic_node(exim_t) corenet_tcp_bind_smtp_port(exim_t) -corenet_tcp_bind_amavisd_send_port(exim_t) +corenet_tcp_bind_smtp_beforequeue_port(exim_t) corenet_tcp_connect_auth_port(exim_t) corenet_tcp_connect_smtp_port(exim_t) corenet_tcp_connect_ldap_port(exim_t) -- 1.7.0.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100427/e23116fd/attachment.bin