logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

usr.lib.dovecot.imap (1284B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2009-2010 Canonical Ltd.
  4. #    Copyright (C) 2011-2020 Christian Boltz
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  11. # vim: ft=apparmor
  13. abi <abi/3.0>,
  15. include <tunables/global>
  16. include <tunables/dovecot>
  18. profile dovecot-imap /usr/lib/dovecot/imap {
  19.   include <abstractions/base>
  20.   include <abstractions/nameservice>
  21.   include <abstractions/dovecot-common>
  23.   capability setuid,
  25.   network unix stream,
  27.   @{DOVECOT_MAILSTORE}/ rw,
  28.   @{DOVECOT_MAILSTORE}/** rwkl,
  30.   @{HOME} r, # ???
  32.   /etc/dovecot/dovecot.conf r,
  33.   /etc/dovecot/conf.d/ r,
  34.   /etc/dovecot/conf.d/** r,
  36.   owner /tmp/dovecot.imap.* rw,
  37.   @{PROC}/@{pid}/attr/{apparmor/,}current rw,
  38.   @{PROC}/@{pid}/stat r,
  39.   /usr/bin/doveconf rix,
  40.   /usr/lib/dovecot/imap mrix,
  41.   /usr/share/dovecot/** r,
  42.   @{run}/dovecot/login/imap rw,
  43.   @{run}/dovecot/auth-master rw,
  44.   @{run}/dovecot/mounts r,
  46.   # Site-specific additions and overrides. See local/README for details.
  47.   include if exists <local/usr.lib.dovecot.imap>
  48. }