summaryrefslogtreecommitdiffstats
path: root/doc/wiki/Plugins.Apparmor.txt
blob: d68f05db72663dd8fd5746ce7a51c6a40a0ed8af (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
Apparmor plugin
===============

A simple plugin which allows changing "hat" (apparmor context) when user is
loaded. Context is changed back to default on user deinit. Multiple hats are
supported, and passed to apparmor_change_hatv function. Since v2.2.32.

Configuration
-------------

---%<-------------------------------------------------------------------------
mail_plugins = $mail_plugins apparmor

plugin {
  apparmor_hat = hat_name
  apparmor_hat2 = another_hat
}
---%<-------------------------------------------------------------------------

You can also specify hats from user or password database. If you provide from
passdb, use userdb_apparmor_hat=hat and subsequent hats as userdb_apparmor_hat2
and so forth. From userdb, you can omit the userdb_ prefix.

It's also possible to combine these, so that you can provide some of the hats
from config and some from passdb/userdb configuration. If you want to provide
apparmor_hat2 from config, make sure you provide apparmor_hat from userdb or
passdb always, otherwise apparmor_hat2 won't be seen.

Debugging
---------

Set mail_debug=yes to see context changes.

(This file was created from the wiki on 2019-06-19 12:42)