From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Tue, 30 Dec 2014 21:21:39 +0100 Subject: [refpolicy] [PATCH 6/6] Courier IMAP needs to manage the users' maildir In-Reply-To: <1419970899-19892-1-git-send-email-sven.vermeulen@siphos.be> References: <1419970899-19892-1-git-send-email-sven.vermeulen@siphos.be> Message-ID: <1419970899-19892-7-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Without these permissions, the logon immediately terminates and the following shows up in the logs: Dec 30 19:45:33 localhost imapd: Connection, ip=[::ffff:192.168.100.152] Dec 30 19:45:33 localhost imapd: chdir .maildir: Permission denied Dec 30 19:45:33 localhost imapd: root: Permission denied The first denial (and many similar ones follow when granted): type=AVC msg=audit(1419968733.163:197): avc: denied { search } for pid=4292 comm="courier-imapd" name=".maildir" dev="vda3" ino=393221 scontext=system_u:system_r:courier_pop_t:s0 tcontext=root:object_r:mail_home_rw_t:s0 tclass=dir Signed-off-by: Sven Vermeulen --- courier.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/courier.te b/courier.te index c06c3ad..49fa11d 100644 --- a/courier.te +++ b/courier.te @@ -148,6 +148,8 @@ corecmd_exec_shell(courier_pop_t) miscfiles_read_localization(courier_pop_t) +mta_manage_mail_home_rw_content(courier_pop_t) + userdom_manage_user_home_content_files(courier_pop_t) userdom_manage_user_home_content_dirs(courier_pop_t) -- 2.0.5