From 451140e4c1f0bb6d8df25d18d74e549a83f46e4a Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Tue, 9 Aug 2022 16:56:21 +0200 Subject: [PATCH] Allow postfix/smtp and postfix/virtual read kerberos key table This permission is required when postfix is configured to use virtual mailboxes and store data into postgresql database. Resolves: rhbz#1983308 --- policy/modules/contrib/postfix.te | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/policy/modules/contrib/postfix.te b/policy/modules/contrib/postfix.te index 5451023d79..c236828d0e 100644 --- a/policy/modules/contrib/postfix.te +++ b/policy/modules/contrib/postfix.te @@ -699,6 +699,10 @@ optional_policy(` dspam_stream_connect(postfix_smtp_t) ') +optional_policy(` + kerberos_read_keytab(postfix_smtp_t) +') + optional_policy(` milter_stream_connect_all(postfix_smtp_t) ') @@ -776,6 +780,10 @@ userdom_manage_user_home_dirs(postfix_virtual_t) userdom_manage_user_home_content(postfix_virtual_t) userdom_filetrans_home_content(postfix_virtual_t) +optional_policy(` + kerberos_read_keytab(postfix_virtual_t) +') + ######################################## # # postfix_domain common policy