Bug 2224645 - Add SELinux policy for dovecot-pigeonhole
Summary: Add SELinux policy for dovecot-pigeonhole
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: selinux-policy
Version: 9.2
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: ---
Assignee: Nikola Knazekova
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-07-21 18:48 UTC by Graham Leggett
Modified: 2023-07-26 08:08 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-162998 0 None None None 2023-07-21 18:49:44 UTC

Description Graham Leggett 2023-07-21 18:48:17 UTC
Description of problem:

dovecot-pigeonhole package has no selinux policy.

It is not possible to configure it, as it has nowhere to write its files.

Version-Release number of selected component (if applicable):

selinux-policy-38.1.11-2.el9_2.3.noarch
selinux-policy-targeted-38.1.11-2.el9_2.3.noarch

How reproducible:

Always.

Steps to Reproduce:
1. Install and configure dovecot-pigeonhole.
2.
3.

Actual results:

SELinux failures, because there are no directories allocated to put sieve files with the correct permissions.

Expected results:

SELinux policy that allows at least one path accessible by dovecot-pigeonhole with the correct permissions.

Additional info:

The path /var/lib/dovecot/* is allowed by selinux, but denied to all users outside the dovecot group, breaking dovecot-pigeonhole.


Note You need to log in before you can comment on or make changes to this bug.