Skip to content

Commit

Permalink
Allow postfix-master map postfix data files
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
Nov 03 16:25:28 audit[294288]: AVC avc:  denied  { map } for  pid=294288 comm="postscreen" path="/var/lib/postfix/postscreen_cache.lmdb" dev="dm-1" ino=25200449 scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:object_r:postfix_data_t:s0 tclass=file permissive=0

Resolves: rhbz#2247848
  • Loading branch information
zpytela committed Dec 4, 2023
1 parent f442292 commit 0febf90
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/contrib/postfix.te
Original file line number Diff line number Diff line change
Expand Up @@ -124,7 +124,7 @@ mta_filetrans_aliases(postfix_master_t, postfix_etc_t)
can_exec(postfix_master_t, postfix_exec_t)

allow postfix_master_t postfix_data_t:dir manage_dir_perms;
allow postfix_master_t postfix_data_t:file manage_file_perms;
allow postfix_master_t postfix_data_t:file { manage_file_perms map };

allow postfix_master_t postfix_keytab_t:file read_file_perms;

Expand Down

0 comments on commit 0febf90

Please sign in to comment.