logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

usr.lib.dovecot.auth (1621B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2013-2020 Christian Boltz
  4. #    Copyright (C) 2014 Christian Wittmer
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  11. # vim: ft=apparmor
  13. abi <abi/3.0>,
  15. include <tunables/global>
  17. profile dovecot-auth /usr/lib/dovecot/auth {
  18.   include <abstractions/authentication>
  19.   include <abstractions/base>
  20.   include <abstractions/mysql>
  21.   include <abstractions/nameservice>
  22.   include <abstractions/openssl>
  23.   include <abstractions/wutmp>
  24.   include <abstractions/dovecot-common>
  26.   capability audit_write,
  27.   capability dac_override,
  28.   capability dac_read_search,
  29.   capability setuid,
  30.   capability sys_chroot,
  32.   /etc/my.cnf r,
  33.   /etc/my.cnf.d/ r,
  34.   /etc/my.cnf.d/*.cnf r,
  36.   /etc/dovecot/* r,
  37.   /usr/lib/dovecot/auth mr,
  38.   /var/lib/dovecot/auth-chroot/* r,
  40.   # kerberos replay cache
  41.   /var/tmp/imap_* rw,
  42.   /var/tmp/pop_* rw,
  43.   /var/tmp/sieve_* rw,
  44.   /var/tmp/smtp_* rw,
  46.   @{run}/dovecot/auth-master rw,
  47.   @{run}/dovecot/auth-userdb rw,
  48.   @{run}/dovecot/auth-worker rw,
  49.   @{run}/dovecot/login/login rw,
  50.   @{run}/dovecot/auth-token-secret.dat{,.tmp} rw,
  51.   @{run}/dovecot/old-stats-user w,
  52.   @{run}/dovecot/stats-user rw,
  53.   @{run}/dovecot/anvil-auth-penalty rw,
  55.   /var/spool/postfix/private/auth rw,
  57.   # Site-specific additions and overrides. See local/README for details.
  58.   include if exists <local/usr.lib.dovecot.auth>
  59. }