Skip to content

Commit

Permalink
Allow systemd to execute sa-update in spamd_update_t domain BZ(1705331)
Browse files Browse the repository at this point in the history
Replace application_domain with init_system_domain for spamd_update_exec_t.
The /usr/share/spamassassin/sa-update.cron file is now labeled with
spamd_update_exec_t since commit db62634 and it is called off a timer unit file.
  • Loading branch information
zpytela authored and wrabcak committed May 10, 2019
1 parent 7d95f9f commit 7b06d3c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion spamassassin.te
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ gen_tunable(spamd_update_can_network, false)

type spamd_update_t;
type spamd_update_exec_t;
application_domain(spamd_update_t, spamd_update_exec_t)
init_system_domain(spamd_update_t, spamd_update_exec_t)
role system_r types spamd_update_t;

type spamd_t;
Expand Down

0 comments on commit 7b06d3c

Please sign in to comment.