[refpolicy] services_mta.patch

[refpolicy] services_mta.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_mta.patch

Remove ifdef postfix.te

system_mail_t needs to work with exim and uucp

Handle nfs home dirs

Append to mail_spool

Can exec other mail executables

Needs fowner

Can use fifo files to communicate with itself.

Reads tmp files

Reads sysfs

sendmail >> log file is common



Handle nfs and samba for mailserver_delivery apps.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj1AYUACgkQrlYvE4MpobPluQCbByB7AwwXYhYlPYqbwcVBrWnl
DTIAnjIDvCUXZVYgDRf6uuI7SfA3LYRc
=qmPI
-----END PGP SIGNATURE-----

[refpolicy] services_mta.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_mta.patch

Lots of fixes for mta interfaces

system_mail_t needs fowner and uses fifo files

Mailers are always reading /tmp files

Mailers user inodify and inodefs

I allow system mail to be appended to all logs since confined domains 
are constantly redirecting stdout/stderr to log files

system_mail can be sent from apache_bugzill dirs

Gets executed from cron with redirection to cron pipes

add courier/exim mail

If you are a mailserver_delivery you need to write to users homedirs. 
(nfs, cifs)

[refpolicy] services_mta.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_mta.patch

Add label for mailx and courier/bin/sendmail, and esmtp, ssmtp

Add labeling for mail_forward files

Update interfaces for newwer domains.

Lots of minor fixes to run other executables under the system_mail type.

[refpolicy] services_mta.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_mta.patch

Policy for ~/.forward

mail reads system state

[refpolicy] services_mta.patch

[Christopher J. PeBenito]

On Thu, 2009-11-12 at 16:40 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_mta.patch
> 
> Policy for ~/.forward
> 
> mail reads system state

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

[refpolicy] services_mta.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_mta.patch

+    mta_dontaudit_leaks_system_mail(nrpe_t)
+    mta_signal(httpd_t)
+    mta_list_queue(munin_t)


Lots of access for system_mail_t

[refpolicy] services_mta.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_mta.patch

Change mail_forward_t to mail_home_t and add dead.letter



Other fixes to handle leaks.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx27BcACgkQrlYvE4MpobMj4ACgyGPRt486iFwXWXSymOvM1jub
npoAoMr6j+9kR/7CqKgiSpOBRgObcs4/
=9VH0
-----END PGP SIGNATURE-----