[refpolicy] [ Implement ClamSMTPd policy. 4/5] Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t.

[refpolicy] [ Implement ClamSMTPd policy. 4/5] Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t.

[Dominick Grift]

Allow exim_t for bind tcp sockets to smtp_beforequeue_port_t and allow it to
send and recieve smtp before queue content filter server packets.

Remove the policy that allows exim_t to bind tcp sockets to amavisd_send_port_t. This port
type is replaced by smtp_beforequeue_port_t.

Signed-off-by: Dominick Grift <domg472@gmail.com>
---
:100644 100644 fccf3f8... 59024a0... M	policy/modules/services/exim.te
 policy/modules/services/exim.te |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/policy/modules/services/exim.te b/policy/modules/services/exim.te
index fccf3f8..59024a0 100644
--- a/policy/modules/services/exim.te
+++ b/policy/modules/services/exim.te
@@ -86,6 +86,7 @@ corecmd_search_bin(exim_t)
 
 corenet_all_recvfrom_unlabeled(exim_t)
 corenet_all_recvfrom_netlabel(exim_t)
+corenet_sendrecv_smtp_beforequeue_server_packets(exim_t)
 corenet_tcp_sendrecv_generic_if(exim_t)
 corenet_udp_sendrecv_generic_if(exim_t)
 corenet_tcp_sendrecv_generic_node(exim_t)
@@ -93,7 +94,7 @@ corenet_udp_sendrecv_generic_node(exim_t)
 corenet_tcp_sendrecv_all_ports(exim_t)
 corenet_tcp_bind_generic_node(exim_t)
 corenet_tcp_bind_smtp_port(exim_t)
-corenet_tcp_bind_amavisd_send_port(exim_t)
+corenet_tcp_bind_smtp_beforequeue_port(exim_t)
 corenet_tcp_connect_auth_port(exim_t)
 corenet_tcp_connect_smtp_port(exim_t)
 corenet_tcp_connect_ldap_port(exim_t)
-- 
1.7.0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100427/e23116fd/attachment.bin