From 972573cd8b3bedb90799e16ba974eff20177f179 Mon Sep 17 00:00:00 2001 From: Juan Orti Alcaine Date: Nov 21 2017 18:33:05 +0000 Subject: SELinux rule to allow connection to POP port --- diff --git a/radicale.spec b/radicale.spec index ee0447d..2bee207 100644 --- a/radicale.spec +++ b/radicale.spec @@ -3,7 +3,7 @@ Name: radicale Version: 1.1.6 -Release: 1%{?dist} +Release: 2%{?dist} Summary: A simple CalDAV (calendar) and CardDAV (contact) server License: GPLv3+ URL: http://radicale.org @@ -252,6 +252,9 @@ fi %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}-python2.conf %changelog +* Tue Nov 21 2017 Juan Orti Alcaine - 1.1.6-2 +- SELinux rule to allow connection to POP port + * Mon Jul 24 2017 Juan Orti Alcaine - 1.1.6-1 - Version 1.1.6 diff --git a/radicale.te b/radicale.te index 7df3a13..2a82f38 100644 --- a/radicale.te +++ b/radicale.te @@ -1,7 +1,8 @@ -policy_module(radicale, 1.0.7) +policy_module(radicale, 1.0.8) gen_require(` type httpd_t; + type pop_port_t; ') ######################################## @@ -41,6 +42,7 @@ allow radicale_t self:tcp_socket create_stream_socket_perms; allow radicale_t self:unix_dgram_socket create_stream_socket_perms; allow radicale_t radicale_port_t:tcp_socket name_bind; +allow radicale_t pop_port_t:tcp_socket name_connect; manage_dirs_pattern(radicale_t, radicale_log_t, radicale_log_t) manage_files_pattern(radicale_t, radicale_log_t, radicale_log_t)