From: pebenito@ieee.org (Chris PeBenito) Date: Sun, 17 Sep 2017 21:09:00 -0400 Subject: [refpolicy] [PATCH 1/3] postfix: Some table drivers (notably cdb) need to mmap() their databases In-Reply-To: <20170917224714.3eab21c5@vega.skynet.aixah.de> References: <20170911031829.4163-1-aranea@aixah.de> <20170917224714.3eab21c5@vega.skynet.aixah.de> Message-ID: <9d286e50-c55f-c288-b559-a3bae7dbaff5@ieee.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/17/2017 04:47 PM, Luis Ressel wrote: > On Sun, 17 Sep 2017 10:10:34 -0400 > Chris PeBenito wrote: > >> On 09/10/2017 11:18 PM, Luis Ressel via refpolicy wrote: >>> This change also grants exim (the other caller of the >>> mta_read_aliases interface) to map the mail aliases, but that seems >>> minor enough not to warrant the creation of a new interface. >>> --- >>> mta.if | 2 +- >>> postfix.te | 4 ++-- >>> 2 files changed, 3 insertions(+), 3 deletions(-) >>> >>> diff --git a/mta.if b/mta.if >>> index 2b99dd5..8565982 100644 >>> --- a/mta.if >>> +++ b/mta.if >>> @@ -586,7 +586,7 @@ interface(`mta_read_aliases',` >>> ') >>> >>> files_search_etc($1) >>> - allow $1 etc_aliases_t:file read_file_perms; >>> + allow $1 etc_aliases_t:file { read_file_perms map }; >>> ') >>> >>> ######################################## >> >> Merged, the above. The below already came in from Jason Zaman. > > Umm, this wasn't supposed to be merged. I submitted a second revision > of this patch based on your feedback, and you merged it last Tuesday > (commit b17eacb). Please revert commit ac27e919; I'm sorry about the > confusion. No worries. I was confused by how the email thread looked with Thunderbird's threading. -- Chris PeBenito