commit:     61bdf57fff0381f5d1b78ee6ae6030a84750db20
Author:     Laurent Bigonville <bigon <AT> bigon <DOT> be>
AuthorDate: Fri May  3 10:25:00 2019 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Jul 13 06:43:14 2019 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=61bdf57f

Add dovecot to listen to LMTP port

Mails can be injected in dovecot directly using LMTP

Signed-off-by: Jason Zaman <jason <AT> perfinion.com>

 policy/modules/services/dovecot.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/dovecot.te 
b/policy/modules/services/dovecot.te
index 8b45f5c3..4f2c38bf 100644
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -148,6 +148,8 @@ corenet_tcp_sendrecv_generic_node(dovecot_t)
 corenet_tcp_sendrecv_all_ports(dovecot_t)
 corenet_tcp_bind_generic_node(dovecot_t)
 
+corenet_sendrecv_lmtp_server_packets(dovecot_t)
+corenet_tcp_bind_lmtp_port(dovecot_t)
 corenet_sendrecv_mail_server_packets(dovecot_t)
 corenet_tcp_bind_mail_port(dovecot_t)
 corenet_sendrecv_pop_server_packets(dovecot_t)

Reply via email to