selinux-policy/backport-Allow-postfix-smtp-and-postfix-virtual-read-kerberos-key-table.patch
2023-06-30 17:29:07 +08:00

41 lines
1.2 KiB
Diff

From 451140e4c1f0bb6d8df25d18d74e549a83f46e4a Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 9 Aug 2022 16:56:21 +0200
Subject: [PATCH] Allow postfix/smtp and postfix/virtual read kerberos key
table
This permission is required when postfix is configured to use virtual
mailboxes and store data into postgresql database.
Resolves: rhbz#1983308
---
policy/modules/contrib/postfix.te | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/policy/modules/contrib/postfix.te b/policy/modules/contrib/postfix.te
index 5451023d79..c236828d0e 100644
--- a/policy/modules/contrib/postfix.te
+++ b/policy/modules/contrib/postfix.te
@@ -699,6 +699,10 @@ optional_policy(`
dspam_stream_connect(postfix_smtp_t)
')
+optional_policy(`
+ kerberos_read_keytab(postfix_smtp_t)
+')
+
optional_policy(`
milter_stream_connect_all(postfix_smtp_t)
')
@@ -776,6 +780,10 @@ userdom_manage_user_home_dirs(postfix_virtual_t)
userdom_manage_user_home_content(postfix_virtual_t)
userdom_filetrans_home_content(postfix_virtual_t)
+optional_policy(`
+ kerberos_read_keytab(postfix_virtual_t)
+')
+
########################################
#
# postfix_domain common policy