aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRussell Coker <russell@coker.com.au>2023-09-28 23:46:14 +1000
committerKenton Groombridge <concord@gentoo.org>2023-10-06 11:30:52 -0400
commit90affee2271dfbaad7e02781e1c583e886229754 (patch)
tree570c52daffff76af57f577a474be44f9d22c73ad /policy/modules/services/postfix.te
parentsmall systemd patches (#708) (diff)
downloadhardened-refpolicy-90affee2271dfbaad7e02781e1c583e886229754.tar.gz
hardened-refpolicy-90affee2271dfbaad7e02781e1c583e886229754.tar.bz2
hardened-refpolicy-90affee2271dfbaad7e02781e1c583e886229754.zip
misc small patches for cron policy (#701)
* Some misc small patches for cron policy Signed-off-by: Russell Coker <russell@coker.com.au> * added systemd_dontaudit_connect_machined interface Signed-off-by: Russell Coker <russell@coker.com.au> * Remove the line about connecting to tor Signed-off-by: Russell Coker <russell@coker.com.au> * remove the dontaudit for connecting to machined Signed-off-by: Russell Coker <russell@coker.com.au> * changed to distro_debian Signed-off-by: Russell Coker <russell@coker.com.au> * mta: Whitespace changes. Signed-off-by: Chris PeBenito <pebenito@ieee.org> * cron: Move lines. Signed-off-by: Chris PeBenito <pebenito@ieee.org> --------- Signed-off-by: Russell Coker <russell@coker.com.au> Signed-off-by: Chris PeBenito <pebenito@ieee.org> Co-authored-by: Chris PeBenito <pebenito@ieee.org> Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy/modules/services/postfix.te')
-rw-r--r--policy/modules/services/postfix.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te
index 7b158e70..528a84de 100644
--- a/policy/modules/services/postfix.te
+++ b/policy/modules/services/postfix.te
@@ -652,6 +652,7 @@ optional_policy(`
optional_policy(`
cron_system_entry(postfix_postdrop_t, postfix_postdrop_exec_t)
+ cron_use_system_job_fds(postfix_postdrop_t)
')
optional_policy(`