From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Wed, 31 Dec 2014 17:09:58 +0100 Subject: [refpolicy] [PATCH v2 6/6] Courier IMAP needs to manage the users' maildir In-Reply-To: <1420042198-4676-1-git-send-email-sven.vermeulen@siphos.be> References: <1420042198-4676-1-git-send-email-sven.vermeulen@siphos.be> Message-ID: <1420042198-4676-7-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Without these permissions, the logon immediately terminates and the following shows up in the logs: Dec 30 19:45:33 localhost imapd: Connection, ip=[::ffff:192.168.100.152] Dec 30 19:45:33 localhost imapd: chdir .maildir: Permission denied Dec 30 19:45:33 localhost imapd: root: Permission denied The first denial (and many similar ones follow when granted): type=AVC msg=audit(1419968733.163:197): avc: denied { search } for pid=4292 comm="courier-imapd" name=".maildir" dev="vda3" ino=393221 scontext=system_u:system_r:courier_pop_t:s0 tcontext=root:object_r:mail_home_rw_t:s0 tclass=dir Signed-off-by: Sven Vermeulen --- courier.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/courier.te b/courier.te index 6053939..91c0ee8 100644 --- a/courier.te +++ b/courier.te @@ -148,8 +148,7 @@ corecmd_exec_shell(courier_pop_t) miscfiles_read_localization(courier_pop_t) -userdom_manage_user_home_content_files(courier_pop_t) -userdom_manage_user_home_content_dirs(courier_pop_t) +mta_manage_mail_home_rw_content(courier_pop_t) ######################################## # -- 2.0.5