myexim01.te contents: Does it look ok?

Frank Murphy frankly3d at gmail.com
Sat Oct 25 17:33:39 UTC 2008


Scenario
Rebuilt server fresh F8 install then yum update.

Below follows myexim01.te
Original AVC(s) can be included if necessary.
======================================================

module myexim01 1.0;

require {
	type system_crond_t;
	type system_mail_t;
	type system_crond_var_run_t;
	type audisp_t;
	type system_mail_tmp_t;
	type exim_t;
	class capability sys_nice;
	class fifo_file getattr;
	class file { read append };
}

#============= audisp_t ==============
allow audisp_t self:capability sys_nice;

#============= exim_t ==============
allow exim_t system_crond_t:fifo_file getattr;
allow exim_t system_mail_tmp_t:file read;

#============= system_mail_t ==============
allow system_mail_t system_crond_var_run_t:file append;


=========================================================

Frank

-- 
gpg id EB547226 Revoked Forgot Password :(
aMSN: Frankly3D
http://www.frankly3d.com




More information about the fedora-selinux-list mailing list