Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
Date: Thu, 31 Mar 2022 03:31:40
Message-Id: 1648694453.04b123f76086ec111c475bd22b81b2da5be95037.perfinion@gentoo
1 commit: 04b123f76086ec111c475bd22b81b2da5be95037
2 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
3 AuthorDate: Fri Mar 25 12:45:21 2022 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Thu Mar 31 02:40:53 2022 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=04b123f7
7
8 postfix: Move lines.
9
10 No rule change.
11
12 Signed-off-by: Chris PeBenito <pebenito <AT> ieee.org>
13 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
14
15 policy/modules/services/postfix.te | 18 +++++++++---------
16 1 file changed, 9 insertions(+), 9 deletions(-)
17
18 diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te
19 index 0f865b00..a61882d4 100644
20 --- a/policy/modules/services/postfix.te
21 +++ b/policy/modules/services/postfix.te
22 @@ -738,6 +738,10 @@ allow postfix_showq_t postfix_spool_t:file read_file_perms;
23 term_use_all_ptys(postfix_showq_t)
24 term_use_all_ttys(postfix_showq_t)
25
26 +optional_policy(`
27 + systemd_use_nss(postfix_showq_t)
28 +')
29 +
30 ########################################
31 #
32 # Smtp delivery local policy
33 @@ -761,10 +765,6 @@ optional_policy(`
34 cyrus_stream_connect(postfix_smtp_t)
35 ')
36
37 -optional_policy(`
38 - systemd_use_nss(postfix_smtp_t)
39 -')
40 -
41 optional_policy(`
42 dovecot_stream_connect(postfix_smtp_t)
43 ')
44 @@ -774,7 +774,7 @@ optional_policy(`
45 ')
46
47 optional_policy(`
48 - systemd_use_nss(postfix_showq_t)
49 + systemd_use_nss(postfix_smtp_t)
50 ')
51
52 ########################################
53 @@ -806,10 +806,6 @@ optional_policy(`
54 certbot_read_lib(postfix_smtpd_t)
55 ')
56
57 -optional_policy(`
58 - systemd_use_nss(postfix_smtpd_t)
59 -')
60 -
61 optional_policy(`
62 dovecot_stream_connect_auth(postfix_smtpd_t)
63 dovecot_stream_connect(postfix_smtpd_t)
64 @@ -840,6 +836,10 @@ optional_policy(`
65 spamassassin_stream_connect_spamd(postfix_smtpd_t)
66 ')
67
68 +optional_policy(`
69 + systemd_use_nss(postfix_smtpd_t)
70 +')
71 +
72 ########################################
73 #
74 # Virtual local policy