From: Miroslav Grepl <mgrepl@redhat.com>
Date: Mon, 11 Jul 2011 18:25:24 +0000 (+0000)
Subject: Allow only spamc_t to connect to abrt over unix stream socket rather than all apps... 
X-Git-Tag: 000~728
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6265dc3783a5ac6f66b6411143835b10b616432b;p=people%2Fstevee%2Fselinux-policy.git

Allow only spamc_t to connect to abrt over unix stream socket rather than all apps domains for now
---

diff --git a/policy/modules/services/spamassassin.te b/policy/modules/services/spamassassin.te
index 7e51d2b3..7573826a 100644
--- a/policy/modules/services/spamassassin.te
+++ b/policy/modules/services/spamassassin.te
@@ -334,6 +334,11 @@ tunable_policy(`use_samba_home_dirs',`
 	fs_manage_cifs_symlinks(spamc_t)
 ')
 
+
+optional_policy(`
+	abrt_stream_connect(spamc_t)
+')
+
 optional_policy(`
 	# Allow connection to spamd socket above
 	evolution_stream_connect(spamc_t)