File apparmor.start-pop3-tcpserver of Package netqmail

# (C) 2011 Peter Conrad <conrad@quisquis.de>
#
# This file is licensed under the terms of the
# GNU General Public License Version 2. A copy of these terms should be
# enclosed as "gpl-2.0.txt" in the package containing this file.

#include <tunables/global>

/usr/lib/qmail/start-pop3-tcpserver {
	#include <abstractions/base>
	#include <abstractions/nameservice>
	#include <abstractions/authentication>

	/bin/hostname Ux,

	/usr/bin/checkpassword-pam ix,
	/usr/bin/tcpserver ix,

	/usr/lib/qmail/qmail-popup ix,
	/usr/lib/qmail/qmail-pop3d ix,

	/usr/lib/qmail/start-pop3-tcpserver r,

	/etc/tcprules.pop3d.cdb r,

	@{HOME}/Maildir/** rw,

	# required for pam_env module
	/etc/environment r,

	# required for pam_loginuid module
	/proc/*/loginuid w,


	capability audit_control,
	capability setgid,
	capability setuid,

	network tcp,
}