File apparmor.qmail-remote.real of Package netqmail

# (C) 2011 Peter Conrad <conrad@quisquis.de>
#
# This file is licensed under the terms of the
# GNU General Public License Version 2. A copy of these terms should be
# enclosed as "gpl-2.0.txt" in the package containing this file.

#include <tunables/global>

/usr/lib/qmail/qmail-remote.real {
	#include <abstractions/base>
	#include <abstractions/nameservice>

	/etc/qmail/control/clientcert.pem r,
	/etc/qmail/control/helohost r,
	/etc/qmail/control/notlshosts/* r,
	/etc/qmail/control/me r,
	/etc/qmail/control/smtproutes r,
	/etc/qmail/control/timeoutconnect r,
	/etc/qmail/control/timeoutremote r,
	/etc/qmail/control/tlsclientciphers r,
	/etc/qmail/control/tlshosts/* r,
	/etc/qmail/control/useipv6 r,
	# Only if clientcert.pem is a symlink to servercert.pem!
	/etc/qmail/control/servercert.pem r,

	/usr/lib/qmail/qmail-remote.real m,

	/var/spool/qmail-queue/lock/ r,
	/var/spool/qmail-queue/lock/tcpto rwk,
	/var/spool/qmail-queue/mess/*/* r,

	network tcp,
}