diff --git a/policy/modules/contrib/mta.if b/policy/modules/contrib/mta.if index 80738621b3..9cecbef637 100644 --- a/policy/modules/contrib/mta.if +++ b/policy/modules/contrib/mta.if @@ -524,6 +524,25 @@ interface(`mta_read_config',` read_lnk_files_pattern($1, etc_mail_t, etc_mail_t) ') +######################################## +## +## Mmap mail server configuration. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`mta_map_config',` + gen_require(` + type etc_mail_t; + ') + + allow $1 etc_mail_t:file map; +') + ######################################## ## ## write mail server configuration. diff --git a/policy/modules/contrib/sendmail.te b/policy/modules/contrib/sendmail.te index d3b70e081b..16c69a69d6 100644 --- a/policy/modules/contrib/sendmail.te +++ b/policy/modules/contrib/sendmail.te @@ -126,6 +126,7 @@ userdom_read_user_home_content_files(sendmail_t) userdom_dontaudit_list_user_home_dirs(sendmail_t) mta_read_config(sendmail_t) +mta_map_config(sendmail_t) mta_etc_filetrans_aliases(sendmail_t) # Write to /etc/aliases and /etc/mail. mta_map_aliases(sendmail_t)