logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

usr.lib.dovecot.lmtp (1229B)


  1. # ------------------------------------------------------------------
  2. #
  3. # Copyright (C) 2013-2020 Christian Boltz
  4. #
  5. # This program is free software; you can redistribute it and/or
  6. # modify it under the terms of version 2 of the GNU General Public
  7. # License published by the Free Software Foundation.
  8. #
  9. # ------------------------------------------------------------------
  10. # vim: ft=apparmor
  11. abi <abi/3.0>,
  12. include <tunables/global>
  13. include <tunables/dovecot>
  14. profile dovecot-lmtp /usr/lib/dovecot/lmtp {
  15. include <abstractions/base>
  16. include <abstractions/nameservice>
  17. include <abstractions/dovecot-common>
  18. include <abstractions/openssl>
  19. include <abstractions/ssl_certs>
  20. include <abstractions/ssl_keys>
  21. capability dac_override,
  22. capability dac_read_search,
  23. capability setuid,
  24. @{DOVECOT_MAILSTORE}/ rw,
  25. @{DOVECOT_MAILSTORE}/** rwkl,
  26. @{HOME}/.dovecot.svbin r,
  27. @{PROC}/@{pid}/attr/{apparmor/,}current rw,
  28. owner @{PROC}/@{pid}/io r,
  29. owner @{PROC}/@{pid}/stat r,
  30. @{PROC}/*/mounts r,
  31. /tmp/dovecot.lmtp.* rw,
  32. /usr/lib/dovecot/lmtp mr,
  33. @{run}/dovecot/mounts r,
  34. # Site-specific additions and overrides. See local/README for details.
  35. include if exists <local/usr.lib.dovecot.lmtp>
  36. }