Allow only spamc_t to connect to abrt over unix stream socket rather than all apps...

diff --git a/policy/modules/services/spamassassin.te b/policy/modules/services/spamassassin.te
index 7e51d2b330774902cf8c57f2fa5ce78e5786670c..7573826aa201c574d7cf3e666dff7d8ce39e1e78 100644 (file)
--- a/policy/modules/services/spamassassin.te
+++ b/policy/modules/services/spamassassin.te
@@ -334,6 +334,11 @@ tunable_policy(`use_samba_home_dirs',`
        fs_manage_cifs_symlinks(spamc_t)
 ')
 
+
+optional_policy(`
+       abrt_stream_connect(spamc_t)
+')
+
 optional_policy(`
        # Allow connection to spamd socket above
        evolution_stream_connect(spamc_t)