aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRussell Coker <russell@coker.com.au>2023-09-22 02:01:24 +1000
committerKenton Groombridge <concord@gentoo.org>2023-10-06 11:27:06 -0400
commit98ebbf0f2916e7541905c03eef89330b51c9ff97 (patch)
treed19309947e297b1050b889a069d803ead3e8619b /policy/modules/services/dkim.fc
parentpolicy for the Reliability Availability servicability daemon (#690) (diff)
downloadhardened-refpolicy-98ebbf0f2916e7541905c03eef89330b51c9ff97.tar.gz
hardened-refpolicy-98ebbf0f2916e7541905c03eef89330b51c9ff97.tar.bz2
hardened-refpolicy-98ebbf0f2916e7541905c03eef89330b51c9ff97.zip
policy patches for anti-spam daemons (#698)
* Patches for anti-spam related policy * Added a seperate tunable for execmem, can be enabled for people who need it which means Debian rspam users and some of the less common SpamAssassin configurations Signed-off-by: Russell Coker <russell@coker.com.au> Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy/modules/services/dkim.fc')
-rw-r--r--policy/modules/services/dkim.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/services/dkim.fc b/policy/modules/services/dkim.fc
index 08b65263..0b269c0a 100644
--- a/policy/modules/services/dkim.fc
+++ b/policy/modules/services/dkim.fc
@@ -1,4 +1,5 @@
/etc/opendkim/keys(/.*)? gen_context(system_u:object_r:dkim_milter_private_key_t,s0)
+/etc/dkimkeys(/.*)? gen_context(system_u:object_r:dkim_milter_private_key_t,s0)
/etc/rc\.d/init\.d/((opendkim)|(dkim-milter)) -- gen_context(system_u:object_r:dkim_milter_initrc_exec_t,s0)