Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t.
PATCH 4/5 Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t.
Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t and allow it to send and recieve smtp before queue content filter server packets.
Remove the policy that allows exim_t to bind tcp sockets to amavisd_send_port_t. This port type is replaced by smtp_beforequeue_port_t.
Signed-off-by Dominick Grift <[email protected]>
---
:100644 100644 fccf3f8... 59024a0... M policy/modules/services/exim.te
policy/modules/services/exim.te | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)
policy/modules/services/exim.te +2 -1
@@ -86,6 +86,7 @@ corecmd_search_bin(exim_t) corenet_all_recvfrom_unlabeled(exim_t) corenet_all_recvfrom_netlabel(exim_t) +corenet_sendrecv_smtp_beforequeue_server_packets(exim_t) corenet_tcp_sendrecv_generic_if(exim_t) corenet_udp_sendrecv_generic_if(exim_t) corenet_tcp_sendrecv_generic_node(exim_t)
@@ -93,7 +94,7 @@ corenet_udp_sendrecv_generic_node(exim_t) corenet_tcp_sendrecv_all_ports(exim_t) corenet_tcp_bind_generic_node(exim_t) corenet_tcp_bind_smtp_port(exim_t) -corenet_tcp_bind_amavisd_send_port(exim_t) +corenet_tcp_bind_smtp_beforequeue_port(exim_t) corenet_tcp_connect_auth_port(exim_t) corenet_tcp_connect_smtp_port(exim_t) corenet_tcp_connect_ldap_port(exim_t)
Signature · 9 lines
1.7.0.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100427/e23116fd/attachment.bin