usr.lib.dovecot.deliver (1180B)
- # ------------------------------------------------------------------
 - #
 - # Copyright (C) 2009 Dulmandakh Sukhbaatar <dulmandakh@gmail.com>
 - # Copyright (C) 2009-2014 Canonical Ltd.
 - # Copyright (C) 2011-2020 Christian Boltz
 - #
 - # This program is free software; you can redistribute it and/or
 - # modify it under the terms of version 2 of the GNU General Public
 - # License published by the Free Software Foundation.
 - #
 - # ------------------------------------------------------------------
 - # vim: ft=apparmor
 - abi <abi/3.0>,
 - include <tunables/global>
 - include <tunables/dovecot>
 - profile dovecot-deliver /usr/lib/dovecot/deliver {
 - include <abstractions/base>
 - include <abstractions/nameservice>
 - include <abstractions/dovecot-common>
 - capability setuid,
 - @{DOVECOT_MAILSTORE}/ rw,
 - @{DOVECOT_MAILSTORE}/** rwkl,
 - # http://www.postfix.org/SASL_README.html#server_dovecot
 - /etc/dovecot/dovecot.conf r,
 - /etc/dovecot/{auth,conf}.d/*.conf r,
 - /etc/dovecot/dovecot-postfix.conf r, # ???
 - @{HOME} r, # ???
 - /usr/lib/dovecot/deliver mr,
 - # Site-specific additions and overrides. See local/README for details.
 - include if exists <local/usr.lib.dovecot.deliver>
 - }