[apparmor] [patch] dovecot profiles

John Johansen john.johansen at canonical.com
Fri Aug 19 23:50:43 UTC 2011


On 08/19/2011 03:57 AM, Christian Boltz wrote:
> Hello,
> 
> I just remembered there's a dovecot profile patch in 
> openSUSE:11.4:Update:Text that has not made it into the Factory package 
> yet. I just updated it to match trunk.
> 
> I hope it's not too late to include it in 2.7 beta ;-)
> 
> 
> Changes:
> 
> Dovecot profile update:
> - allow /var/spool/mail, not only the /var/mail symlink
> - allow @{HOME}/Mail/
> - allow capability fsetid, read access to /etc/lsb-release and 
>   SuSE-release and k for /var/{lib,run}/dovecot in usr.bin.dovecot
> 
> References:
> - dovecot: Added support for /var/spool/mail (bnc#691072)
> - Updated dovecot profile (bnc#681267).
> 
> Patch taken from openSUSE:11.4:Update:Test, file apparmor-profiles-
> dovecot
> updated to match trunk by Christian Boltz <apparmor at cboltz.de>
> 
Christian,

I have excluded this patch from beta1, we can always drop it into beta2




More information about the AppArmor mailing list