From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sun, 25 Mar 2018 13:57:11 +0200 Subject: [refpolicy] [PATCH v3 16/19] Make postfix user content access optional In-Reply-To: <20180325115714.5610-1-sven.vermeulen@siphos.be> References: <20180325115714.5610-1-sven.vermeulen@siphos.be> Message-ID: <20180325115714.5610-17-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The postfix virtual domain does not always need full manage rights on the users' home directories and content. We make these rights optional through the postfix_{read,manage}_{generic,all}_user_content booleans. Changes since v1: - Move tunable definition inside template Signed-off-by: Sven Vermeulen --- postfix.te | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/postfix.te b/postfix.te index c7ae7cb..3576c2d 100644 --- a/postfix.te +++ b/postfix.te @@ -826,8 +826,4 @@ mta_delete_spool(postfix_virtual_t) mta_read_config(postfix_virtual_t) mta_manage_spool(postfix_virtual_t) -userdom_manage_user_home_dirs(postfix_virtual_t) -userdom_manage_user_home_content_dirs(postfix_virtual_t) -userdom_manage_user_home_content_files(postfix_virtual_t) -userdom_home_filetrans_user_home_dir(postfix_virtual_t) -userdom_user_home_dir_filetrans_user_home_content(postfix_virtual_t, { file dir }) +userdom_user_content_access_template(postfix, postfix_virtual_t) -- 2.16.1