From: russell@coker.com.au (Russell Coker) Date: Sat, 12 Mar 2011 10:53:13 +1100 Subject: [refpolicy] Postfix policy questions In-Reply-To: <20110311140406.GA19004@siphos.be> References: <20110311140406.GA19004@siphos.be> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com >I'm trying to figure out why the Postfix policy is as it is currently >in the >reference policy. It looks as if the administrative tasks (like >postqueue, >postsuper, ...) as shielded from being used by default by any role (not >even >sysadm_r). The Postfix policy was written to allow all the operations that are performed in normal operation. There was no deliberate attempt to restrict sysadm_r. -- My blog http://etbe.coker.com.au Sent from an Xperia X10 Android phone