|
Dominick Grift |
1b23555 |
policy_module(dkim, 1.1.2)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
########################################
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
# Declarations
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
milter_template(dkim)
|
|
Chris PeBenito |
9401ae1 |
|
|
Dominick Grift |
15ce6aa |
type dkim_milter_initrc_exec_t;
|
|
Dominick Grift |
15ce6aa |
init_script_file(dkim_milter_initrc_exec_t)
|
|
Dominick Grift |
15ce6aa |
|
|
Chris PeBenito |
9401ae1 |
type dkim_milter_private_key_t;
|
|
Chris PeBenito |
9401ae1 |
files_type(dkim_milter_private_key_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
########################################
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
# Local policy
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
allow dkim_milter_t self:capability { setgid setuid };
|
|
![](https://seccdn.libravatar.org/avatar/b1ea9b9c6af4f6c514e29d99c9ca5df476b457dd240b3fc14286c5f50f2ff406?s=16&d=retro) |
a1c43d7 |
allow dkim_milter_t self:process signal;
|
|
Dominick Grift |
1b23555 |
allow dkim_milter_t self:unix_stream_socket create_stream_socket_perms;
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
read_files_pattern(dkim_milter_t, dkim_milter_private_key_t, dkim_milter_private_key_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
kernel_read_kernel_sysctls(dkim_milter_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
dev_read_urand(dkim_milter_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
![](https://seccdn.libravatar.org/avatar/b1ea9b9c6af4f6c514e29d99c9ca5df476b457dd240b3fc14286c5f50f2ff406?s=16&d=retro) |
25b6b0f |
files_search_spool(dkim_milter_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
mta_read_config(dkim_milter_t)
|