Allow dovecot-auth to execute pam_krb5_storetmp

diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te
index f4f24023993d33bc4b671fdf4fa7a240f5bccc18..4bbff24bd3e272f7538bf2c750bbcc8316a434bf 100644 (file)
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -220,6 +220,8 @@ dovecot_stream_connect_auth(dovecot_auth_t)
 kernel_read_all_sysctls(dovecot_auth_t)
 kernel_read_system_state(dovecot_auth_t)
 
+corecmd_exec_bin(dovecot_auth_t)
+
 logging_send_audit_msgs(dovecot_auth_t)
 logging_send_syslog_msg(dovecot_auth_t)