procmail with nfs home dirs

[Matthew Gillen]

Hi,
I'm new to SELinux, and I was having some problems with procmail not working
correctly for me with NFS (via NIS-based autofs) home directories on FC5.

There seemed to be a discussion about a similar issue a while back:
http://www.redhat.com/archives/fedora-list/2006-May/msg03265.html
but the solutions there didn't solve my problem.

In any event, I managed to get it working for myself using the following
policy module.  The 'autofs_t:dir search' part seemed to be needed to find
my .procmailrc file, and the rest looks like it is needed to write messages
into my maildirs under $HOME/Mail/

If anyone has suggestions on how to improve this I'd be happy to hear them.
Thanks,
Matt

--------------------------------------
module procmailnfs 1.0;

require {
        class dir { getattr search write };
        class file { append getattr read };
        type autofs_t;
        type default_t;
        type procmail_t;
        role system_r;
};

allow procmail_t autofs_t:dir search;
allow procmail_t default_t:dir { getattr search write };
allow procmail_t default_t:file { append getattr read };
--------------------------------------