!71 revert sync pr

From: @HuaxinLuGitee
Reviewed-by: @zhujianwei001
Signed-off-by: @zhujianwei001

backport-Allow-dovecot-bind-to-smtp-ports.patch

@@ -1,29 +0,0 @@
-From f5c688321e04364bdfd030dd1412a7e5a4ecc6b6 Mon Sep 17 00:00:00 2001
-From: Zdenek Pytela <zpytela@redhat.com>
-Date: Tue, 10 Nov 2020 18:04:49 +0100
-Subject: [PATCH] Allow dovecot bind to smtp ports
-
-When dovecot is configured to listen on submission ports
-(tcp 465 or 587), it requires the name_bind permission to ports
-labeled smtp_port_t.
-
-Resolves: rhbz#1881884
----
- dovecot.te | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/policy/modules/contrib/dovecot.te b/policy/modules/contrib/dovecot.te
-index 6cf4b72e9..0b140e932 100644
---- a/policy/modules/contrib/dovecot.te
-+++ b/policy/modules/contrib/dovecot.te
-@@ -147,6 +147,7 @@ corenet_tcp_bind_mail_port(dovecot_t)
- corenet_tcp_bind_pop_port(dovecot_t)
- corenet_tcp_bind_lmtp_port(dovecot_t)
- corenet_tcp_bind_sieve_port(dovecot_t)
-+corenet_tcp_bind_smtp_port(dovecot_t)
- corenet_tcp_connect_all_ports(dovecot_t)
- corenet_tcp_connect_postgresql_port(dovecot_t)
- corenet_sendrecv_pop_server_packets(dovecot_t)
--- 
-2.23.0
-

selinux-policy.spec

@@ -66,7 +66,7 @@ Patch13: allow-systemd-to-mount-unlabeled-filesystemd.patch
 Patch14: add_userman_access_run_dir.patch
 Patch15: add-allow-systemd-timedated-to-unlink-etc-link.patch
 Patch16: add-avc-for-openEuler-1.patch
-Patch17: backport-Allow-dovecot-bind-to-smtp-ports.patch
+Patch17: add-firewalld-fc.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -733,8 +733,8 @@ exit 0
 %endif
 
 %changelog
-* Tue Mar 2 2021 luhuaxin <1539327763@qq.com> - 3.14.2-65
+* Tue Dec 23 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-65
-- add avc for allowing dovecot bind to smtp ports
+- add add-firewalld-fc.patch
 
 * Sun Dec 13 2020 luhuaxin <1539327763@qq.com> - 3.14.2-64
 - add avc for openEuler