commit: d5238cafa6c1b972527056af9a61ae2052ccbe2c
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Thu Jan 24 00:01:37 2019 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Feb 10 04:11:25 2019 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=d5238caf
dovecot: Move lines.
Signed-off-by: Jason Zaman <jason <AT> perfinion.com>
policy/modules/services/dovecot.te | 24 ++++++++++++------------
1 file changed, 12 insertions(+), 12 deletions(-)
diff --git a/policy/modules/services/dovecot.te
b/policy/modules/services/dovecot.te
index bee63714..f23cee27 100644
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -288,12 +288,6 @@ tunable_policy(`dovecot_can_connect_db',`
corenet_tcp_sendrecv_oracledb_port(dovecot_auth_t)
')
-optional_policy(`
- userdom_list_user_tmp(dovecot_auth_t)
- userdom_read_user_tmp_files(dovecot_auth_t)
- userdom_read_user_tmp_symlinks(dovecot_auth_t)
-')
-
optional_policy(`
tunable_policy(`dovecot_can_connect_db',`
mysql_stream_connect(dovecot_auth_t)
@@ -302,6 +296,15 @@ optional_policy(`
')
')
+optional_policy(`
+ nis_authenticate(dovecot_auth_t)
+')
+
+optional_policy(`
+ postfix_manage_private_sockets(dovecot_auth_t)
+ postfix_search_spool(dovecot_auth_t)
+')
+
optional_policy(`
postgresql_unpriv_client(dovecot_auth_t)
@@ -312,12 +315,9 @@ optional_policy(`
')
optional_policy(`
- nis_authenticate(dovecot_auth_t)
-')
-
-optional_policy(`
- postfix_manage_private_sockets(dovecot_auth_t)
- postfix_search_spool(dovecot_auth_t)
+ userdom_list_user_tmp(dovecot_auth_t)
+ userdom_read_user_tmp_files(dovecot_auth_t)
+ userdom_read_user_tmp_symlinks(dovecot_auth_t)
')
########################################
