All of lore.kernel.org
 help / color / mirror / Atom feed
From: dominick.grift@gmail.com (grift)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] [PATCH 09/11] Add ~/.maildir as a valid maildir destination
Date: Sun, 09 Dec 2012 15:01:46 +0100	[thread overview]
Message-ID: <1355061706.1797.73.camel@localhost> (raw)
In-Reply-To: <1355000222-7297-10-git-send-email-sven.vermeulen@siphos.be>

On Sat, 2012-12-08 at 21:57 +0100, Sven Vermeulen wrote:
> Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>

This was merged , thanks

But you are probably overlooking some named file type transitions

grep -r "Maildir" repolicy/

> ---
>  mta.fc |    1 +
>  mta.if |    1 +
>  mta.te |    1 +
>  3 files changed, 3 insertions(+), 0 deletions(-)
> 
> diff --git a/mta.fc b/mta.fc
> index 4fed862..f42896c 100644
> --- a/mta.fc
> +++ b/mta.fc
> @@ -3,6 +3,7 @@ HOME_DIR/\.forward[^/]*	--	gen_context(system_u:object_r:mail_home_t,s0)
>  HOME_DIR/dead\.letter	--	gen_context(system_u:object_r:mail_home_t,s0)
>  HOME_DIR/\.mailrc	--	gen_context(system_u:object_r:mail_home_t,s0)
>  HOME_DIR/Maildir(/.*)?	gen_context(system_u:object_r:mail_home_rw_t,s0)
> +HOME_DIR/\.maildir(/.*)?	gen_context(system_u:object_r:mail_home_rw_t,s0)
>  
>  /bin/mail(x)?	--	gen_context(system_u:object_r:sendmail_exec_t,s0)
>  
> diff --git a/mta.if b/mta.if
> index 99e64cd..ed81cac 100644
> --- a/mta.if
> +++ b/mta.if
> @@ -105,6 +105,7 @@ interface(`mta_role',`
>  	allow $2 mail_home_rw_t:file { manage_file_perms relabel_file_perms };
>  	allow $2 mail_home_rw_t:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms };
>  	userdom_user_home_dir_filetrans($2, mail_home_rw_t, dir, "Maildir")
> +	userdom_user_home_dir_filetrans($2, mail_home_rw_t, dir, ".maildir")
>  
>  	allow $2 user_mail_tmp_t:dir { manage_dir_perms relabel_dir_perms };
>  	allow $2 user_mail_tmp_t:file { manage_file_perms relabel_file_perms };
> diff --git a/mta.te b/mta.te
> index f6b8c2d..fd5814e 100644
> --- a/mta.te
> +++ b/mta.te
> @@ -344,6 +344,7 @@ userdom_user_home_dir_filetrans(mailserver_delivery, mail_home_t, file, ".forwar
>  userdom_user_home_dir_filetrans(mailserver_delivery, mail_home_t, file, ".mailrc")
>  userdom_user_home_dir_filetrans(mailserver_delivery, mail_home_t, file, "dead.letter")
>  userdom_user_home_dir_filetrans(mailserver_delivery, mail_home_rw_t, dir, "Maildir")
> +userdom_user_home_dir_filetrans(mailserver_delivery, mail_home_rw_t, dir, ".maildir")
>  
>  read_files_pattern(mailserver_delivery, system_mail_tmp_t, system_mail_tmp_t)
>  

  reply	other threads:[~2012-12-09 14:01 UTC|newest]

Thread overview: 26+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-12-08 20:56 [refpolicy] [PATCH 00/11] Contrib changes Sven Vermeulen
2012-12-08 20:56 ` [refpolicy] [PATCH 01/11] Moving sandbox code to sandbox section (v2) Sven Vermeulen
2012-12-09 13:51   ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 02/11] Allow sandbox to log violations Sven Vermeulen
2012-12-09 13:55   ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 03/11] Initial policy for logsentry Sven Vermeulen
2012-12-08 22:03   ` grift
2013-10-05  7:22   ` Dominick Grift
2012-12-08 20:56 ` [refpolicy] [PATCH 04/11] Initial policy for makewhatis Sven Vermeulen
2012-12-08 21:57   ` grift
2012-12-09  9:44     ` Sven Vermeulen
2012-12-09 10:59       ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 05/11] Use rw_fifo_file_perms Sven Vermeulen
2012-12-09 13:58   ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 06/11] Apache should not depend on gpg Sven Vermeulen
2012-12-09 13:59   ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 07/11] Mark make.profile entry as portage_conf_t Sven Vermeulen
2012-12-08 21:46   ` grift
2012-12-08 20:56 ` [refpolicy] [PATCH 08/11] Named init script creates rundir Sven Vermeulen
2012-12-09 14:00   ` grift
2012-12-08 20:57 ` [refpolicy] [PATCH 09/11] Add ~/.maildir as a valid maildir destination Sven Vermeulen
2012-12-09 14:01   ` grift [this message]
2012-12-08 20:57 ` [refpolicy] [PATCH 10/11] Support stunnel_read_config for startup Sven Vermeulen
2012-12-09 14:03   ` grift
2012-12-08 20:57 ` [refpolicy] [PATCH 11/11] Updates on stunnel policy Sven Vermeulen
2012-12-09 14:04   ` grift

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1355061706.1797.73.camel@localhost \
    --to=dominick.grift@gmail.com \
    --cc=refpolicy@oss.tresys.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.