Commit bc36daa2 authored by Simon Deziel's avatar Simon Deziel
Browse files

dovecot: align {pop3,managesieve}-login to imap-login



Those 3 login daemons should have similiar needs and thus similar
profiles. IMAP is likely the most tested one so let's align the
other 2 with it. Unix and TCP sockets rules were added to pop3-login
after the removal of abstractions/nameservice that included them
implicitly.
Signed-off-by: Simon Deziel's avatarSimon Deziel <simon@sdeziel.info>
parent 5e5b02b7
......@@ -13,7 +13,6 @@
# vim: ft=apparmor
#include <tunables/global>
/usr/lib/dovecot/managesieve-login {
#include <abstractions/base>
#include <abstractions/dovecot-common>
......@@ -24,6 +23,7 @@
network inet stream,
network inet6 stream,
network unix stream,
/usr/lib/dovecot/managesieve-login mr,
/{,var/}run/dovecot/login-master-notify* rw,
......
......@@ -11,18 +11,21 @@
# vim: ft=apparmor
#include <tunables/global>
/usr/lib/dovecot/pop3-login {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
#include <abstractions/openssl>
capability setuid,
capability sys_chroot,
network inet stream,
network inet6 stream,
network unix stream,
/usr/lib/dovecot/pop3-login mr,
/{,var/}run/dovecot/anvil rw,
/{,var/}run/dovecot/login-master-notify* rw,
/{,var/}run/dovecot/login/ r,
/{,var/}run/dovecot/login/* rw,
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment