Skip to content
Snippets Groups Projects
Commit b0af2c22 authored by Christian Boltz's avatar Christian Boltz
Browse files

Merge Allow dovecot to use all signals

similar to commit 2f9d172c
we discovered that there was a service outage
when dovecot tried to send a usr1 signal

type=AVC msg=audit(1648024138.249:184964): apparmor="DENIED" operation="signal" profile="dovecot" pid=1690 comm="dovecot" requested_mask="send" denied_mask="send" signal=usr1 peer="dovecot-imap-login"

MR: !865


Approved-by: default avatarChristian Boltz <apparmor@cboltz.de>
Merged-by: default avatarChristian Boltz <apparmor@cboltz.de>


(cherry picked from commit 83685ba7)

f0919f83 Allow dovecot to use all signals
parent 32c87d09
No related branches found
No related tags found
No related merge requests found
Pipeline #501606206 passed
......@@ -33,8 +33,8 @@ profile dovecot /usr/{bin,sbin}/dovecot flags=(attach_disconnected) {
capability sys_chroot,
capability sys_resource,
signal send set=(int,quit,term,kill) peer=/usr/lib/dovecot/*,
signal send set=(int,quit,term,kill) peer=dovecot-*,
signal send peer=/usr/lib/dovecot/*,
signal send peer=dovecot-*,
unix (receive, send) type=stream peer=(label=/usr/lib/dovecot/anvil),
unix (receive, send) type=stream peer=(label=dovecot-anvil),
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment