File apparmor.nullmailer of Package nullmailer

# (C) 2011 Peter Conrad <conrad@quisquis.de>
#
# This program is licensed under the terms of the
# GNU General Public License Version 2. A copy of these terms should be
# enclosed as "COPYING" in the package containing this file.

#include <tunables/global>

/usr/lib/nullmailer/service/run {
	#include <abstractions/base>
	#include <abstractions/nameservice>

	/usr/bin/setuidgid ix,
	/usr/sbin/nullmailer-send ix,
	/usr/lib/nullmailer/smtp ix,

	capability setgid,
	capability setuid,

	/etc/nullmailer/* r,

	/var/spool/nullmailer/** r,
	/var/spool/nullmailer/queue/* w,

	network tcp,
}

/usr/lib/nullmailer/service/log/run {
	#include <abstractions/base>
	#include <abstractions/nameservice>

	/usr/bin/multilog ix,
	/usr/bin/setuidgid ix,

	capability setgid,
	capability setuid,

	/usr/lib/nullmailer/service/log/ r,
	/usr/lib/nullmailer/service/log/run r,

	/var/log/nullmailer/ r,
	/var/log/nullmailer/lock k,
	/var/log/nullmailer/* rwl,
}