packages/selinux-policy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add backport patch for dovecot

Browse Source 
(cherry picked from commit 1c931678263cf426c22f5d7ad2e4d4a489a6084f)
This commit is contained in:
HuaxinLuGitee 2021-03-02 20:36:42 +08:00 committed by openeuler-sync-bot
parent 8b839e9819
commit daf264c86a
2 changed files with 32 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
backport-Allow-dovecot-bind-to-smtp-ports.patch Normal file
View File

@ -0,0 +1,29 @@
From f5c688321e04364bdfd030dd1412a7e5a4ecc6b6 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 10 Nov 2020 18:04:49 +0100
Subject: [PATCH] Allow dovecot bind to smtp ports
When dovecot is configured to listen on submission ports
(tcp 465 or 587), it requires the name_bind permission to ports
labeled smtp_port_t.
Resolves: rhbz#1881884
---
dovecot.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/dovecot.te b/policy/modules/contrib/dovecot.te
index 6cf4b72e9..0b140e932 100644
--- a/policy/modules/contrib/dovecot.te
+++ b/policy/modules/contrib/dovecot.te
@@ -147,6 +147,7 @@ corenet_tcp_bind_mail_port(dovecot_t)
corenet_tcp_bind_pop_port(dovecot_t)
corenet_tcp_bind_lmtp_port(dovecot_t)
corenet_tcp_bind_sieve_port(dovecot_t)
+corenet_tcp_bind_smtp_port(dovecot_t)
corenet_tcp_connect_all_ports(dovecot_t)
corenet_tcp_connect_postgresql_port(dovecot_t)
corenet_sendrecv_pop_server_packets(dovecot_t)
--
2.23.0

6
selinux-policy.spec
View File

@ -66,7 +66,7 @@ Patch13: allow-systemd-to-mount-unlabeled-filesystemd.patch
Patch14: add_userman_access_run_dir.patch
Patch15: add-allow-systemd-timedated-to-unlink-etc-link.patch
Patch16: add-avc-for-openEuler-1.patch
Patch17: add-firewalld-fc.patch
Patch17: backport-Allow-dovecot-bind-to-smtp-ports.patch
BuildArch: noarch
BuildRequires: python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@ -733,8 +733,8 @@ exit 0
%endif
%changelog
* Tue Dec 23 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-65
- add add-firewalld-fc.patch
* Tue Mar 2 2021 luhuaxin <1539327763@qq.com> - 3.14.2-65
- add avc for allowing dovecot bind to smtp ports
* Sun Dec 13 2020 luhuaxin <1539327763@qq.com> - 3.14.2-64
- add avc for openEuler