Date: Wed, 17 Dec 2003 06:26:18 -0800 (PST) From: Chris Vance <cvance@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 44014 for review Message-ID: <200312171426.hBHEQINn018899@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=44014 Change 44014 by cvance@cvance_korben on 2003/12/17 06:25:17 Fix policy for sendmail (take /usr/sbin/mailwrapper into consideration) Affected files ... .. //depot/projects/trustedbsd/sebsd_policy/policy/domains/program/unused/mta.te#2 edit .. //depot/projects/trustedbsd/sebsd_policy/policy/file_contexts/program/mta.fc#2 edit Differences ... ==== //depot/projects/trustedbsd/sebsd_policy/policy/domains/program/unused/mta.te#2 (text+ko) ==== @@ -25,6 +25,9 @@ domain_auto_trans(initrc_t, sendmail_exec_t, system_mail_t) ') +# allow mailwrapper to execute sendmail binaries +allow sendmail_t sendmail_exec_t:file execute_no_trans; + # allow the sysadmin to do "mail someone < /home/user/whatever" allow sysadm_mail_t user_home_dir_type:dir search; r_dir_file(sysadm_mail_t, user_home_type) ==== //depot/projects/trustedbsd/sebsd_policy/policy/file_contexts/program/mta.fc#2 (text+ko) ==== @@ -1,5 +1,7 @@ # types for general mail servers /usr/sbin/sendmail(.sendmail)? system_u:object_r:sendmail_exec_t +/usr/sbin/mailwrapper system_u:object_r:sendmail_exec_t +/usr/libexec/sendmail/sendmail system_u:object_r:sendmail_exec_t /etc/aliases system_u:object_r:etc_aliases_t /etc/aliases\.db system_u:object_r:etc_aliases_t /var/spool/mail(/.*)? system_u:object_r:mail_spool_t
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200312171426.hBHEQINn018899>