logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

usr.lib.dovecot.lmtp (1229B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2013-2020 Christian Boltz
  4. #
  5. #    This program is free software; you can redistribute it and/or
  6. #    modify it under the terms of version 2 of the GNU General Public
  7. #    License published by the Free Software Foundation.
  8. #
  9. # ------------------------------------------------------------------
  10. # vim: ft=apparmor
  12. abi <abi/3.0>,
  14. include <tunables/global>
  15. include <tunables/dovecot>
  17. profile dovecot-lmtp /usr/lib/dovecot/lmtp {
  18.   include <abstractions/base>
  19.   include <abstractions/nameservice>
  20.   include <abstractions/dovecot-common>
  21.   include <abstractions/openssl>
  22.   include <abstractions/ssl_certs>
  23.   include <abstractions/ssl_keys>
  25.   capability dac_override,
  26.   capability dac_read_search,
  27.   capability setuid,
  29.   @{DOVECOT_MAILSTORE}/ rw,
  30.   @{DOVECOT_MAILSTORE}/** rwkl,
  32.   @{HOME}/.dovecot.svbin r,
  33.   @{PROC}/@{pid}/attr/{apparmor/,}current rw,
  34.   owner @{PROC}/@{pid}/io r,
  35.   owner @{PROC}/@{pid}/stat r,
  36.   @{PROC}/*/mounts r,
  37.   /tmp/dovecot.lmtp.* rw,
  38.   /usr/lib/dovecot/lmtp mr,
  39.   @{run}/dovecot/mounts r,
  41.   # Site-specific additions and overrides. See local/README for details.
  42.   include if exists <local/usr.lib.dovecot.lmtp>
  43. }