policy_module(dkim, 1.1.3)
########################################
#
# Declarations
#
milter_template(dkim)
type dkim_milter_initrc_exec_t;
init_script_file(dkim_milter_initrc_exec_t)
type dkim_milter_private_key_t;
files_type(dkim_milter_private_key_t)
########################################
#
# Local policy
#
allow dkim_milter_t self:capability { setgid setuid };
allow dkim_milter_t self:process signal;
allow dkim_milter_t self:unix_stream_socket create_stream_socket_perms;
read_files_pattern(dkim_milter_t, dkim_milter_private_key_t, dkim_milter_private_key_t)
kernel_read_kernel_sysctls(dkim_milter_t)
dev_read_urand(dkim_milter_t)
files_search_spool(dkim_milter_t)
mta_read_config(dkim_milter_t)