[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

[Kenton Groombridge]

commit:     304a909724d2e15445449257a45563751eb88a7c
Author:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
AuthorDate: Mon May  6 19:59:55 2024 +0000
Commit:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
CommitDate: Tue May 14 17:41:35 2024 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=304a9097

dovecot: allow dovecot-auth to read SASL keytab

Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org>

 policy/modules/services/dovecot.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/policy/modules/services/dovecot.te 
b/policy/modules/services/dovecot.te
index 11ffbb177..937219831 100644
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -321,6 +321,10 @@ optional_policy(`
        postfix_search_spool(dovecot_auth_t)
 ')
 
+optional_policy(`
+       sasl_read_keytab(dovecot_auth_t)
+')
+
 optional_policy(`
         postgresql_unpriv_client(dovecot_auth_t)