From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Subject: [gentoo-commits] proj/hardened-refpolicy:swift commit in: policy/modules/contrib/ Date: Sat, 16 May 2015 11:13:01 +0000 (UTC) [thread overview] Message-ID: <1431774670.94b22b5403841d31a3eeb61bab332e81c3afb69d.swift@gentoo> (raw) commit: 94b22b5403841d31a3eeb61bab332e81c3afb69d Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Sat May 16 11:11:10 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sat May 16 11:11:10 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=94b22b54 Add postfix operations to postfix_admin Allow postfix administrator to execute postfix: ~# /usr/sbin/postfix reload This also requires the administrative domain to have the ability to send log messages. policy/modules/contrib/postfix.if | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/policy/modules/contrib/postfix.if b/policy/modules/contrib/postfix.if index 8e7d1e7..a7ec448 100644 --- a/policy/modules/contrib/postfix.if +++ b/policy/modules/contrib/postfix.if @@ -748,11 +748,18 @@ interface(`postfix_admin',` ifdef(`distro_gentoo',` gen_require(` type postfix_showq_exec_t; + type postfix_master_exec_t; type postfix_postqueue_t; ') allow postfix_postqueue_t $1:process sigchld; can_exec($1, postfix_showq_exec_t) + + # Postfix admin must be able to execute postfix main (for instance for "postfix reload") + can_exec($1, postfix_master_exec_t) + + # Allow postfix admin to send message to log files, needed during operations like "postfix reload" + logging_send_syslog_msg($1) ') ')
WARNING: multiple messages have this Message-ID (diff)
From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ Date: Sat, 16 May 2015 11:31:07 +0000 (UTC) [thread overview] Message-ID: <1431774670.94b22b5403841d31a3eeb61bab332e81c3afb69d.swift@gentoo> (raw) Message-ID: <20150516113107.TwB-PgR3ldZTAZ8YHBzpoIdHulfnML0v1JdtPQOW6g8@z> (raw) commit: 94b22b5403841d31a3eeb61bab332e81c3afb69d Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Sat May 16 11:11:10 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sat May 16 11:11:10 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=94b22b54 Add postfix operations to postfix_admin Allow postfix administrator to execute postfix: ~# /usr/sbin/postfix reload This also requires the administrative domain to have the ability to send log messages. policy/modules/contrib/postfix.if | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/policy/modules/contrib/postfix.if b/policy/modules/contrib/postfix.if index 8e7d1e7..a7ec448 100644 --- a/policy/modules/contrib/postfix.if +++ b/policy/modules/contrib/postfix.if @@ -748,11 +748,18 @@ interface(`postfix_admin',` ifdef(`distro_gentoo',` gen_require(` type postfix_showq_exec_t; + type postfix_master_exec_t; type postfix_postqueue_t; ') allow postfix_postqueue_t $1:process sigchld; can_exec($1, postfix_showq_exec_t) + + # Postfix admin must be able to execute postfix main (for instance for "postfix reload") + can_exec($1, postfix_master_exec_t) + + # Allow postfix admin to send message to log files, needed during operations like "postfix reload" + logging_send_syslog_msg($1) ') ')
next reply other threads:[~2015-05-16 11:13 UTC|newest] Thread overview: 131+ messages / expand[flat|nested] mbox.gz Atom feed top 2015-05-16 11:13 Sven Vermeulen [this message] 2015-05-16 11:31 ` [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ Sven Vermeulen -- strict thread matches above, loose matches on Subject: below -- 2018-01-18 16:15 [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2018-01-18 16:15 Sven Vermeulen 2017-05-18 17:03 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2017-05-18 17:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2017-05-18 17:03 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2017-05-18 17:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2017-05-18 17:03 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2017-05-18 17:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2017-05-18 17:03 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2017-05-18 17:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2017-05-18 17:02 Sven Vermeulen 2017-05-18 17:02 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2017-05-18 16:54 Sven Vermeulen 2016-10-24 16:56 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2016-10-24 16:47 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2016-10-24 16:03 [gentoo-commits] proj/hardened-refpolicy:next " Sven Vermeulen 2016-10-24 16:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2016-10-24 16:02 Sven Vermeulen 2016-10-24 16:02 Sven Vermeulen 2016-10-24 16:02 Sven Vermeulen 2016-10-24 16:02 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2016-10-24 16:02 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-10-24 15:45 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:34 Sven Vermeulen 2016-07-03 11:33 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2016-07-03 11:34 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2016-07-03 11:33 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2016-07-03 11:34 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2016-07-03 11:33 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2016-07-03 11:34 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-12-02 15:45 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-10-10 12:11 Sven Vermeulen 2015-07-13 17:35 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-11 14:09 Sven Vermeulen 2015-07-07 14:12 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-07-11 14:09 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-06-27 15:03 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-07-11 14:09 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-06-11 16:08 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-06-11 16:04 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-06-11 16:04 Sven Vermeulen 2015-06-09 14:25 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-06-11 16:04 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-06-09 13:59 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-06-09 13:34 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-06-09 13:34 Sven Vermeulen 2015-06-09 13:34 Sven Vermeulen 2015-06-09 13:30 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-06-09 13:24 Sven Vermeulen 2015-05-25 16:15 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-06-09 13:24 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-05-16 11:31 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-05-16 11:30 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-05-15 13:47 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-05-15 13:47 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-05-15 13:47 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-05-15 13:27 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-05-15 13:47 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-05-15 13:27 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen 2015-05-15 13:47 [gentoo-commits] proj/hardened-refpolicy:master " Sven Vermeulen 2015-05-15 13:29 ` [gentoo-commits] proj/hardened-refpolicy:swift " Sven Vermeulen
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=1431774670.94b22b5403841d31a3eeb61bab332e81c3afb69d.swift@gentoo \ --to=swift@gentoo.org \ --cc=gentoo-commits@lists.gentoo.org \ --cc=gentoo-dev@lists.gentoo.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox