|
Server : LiteSpeed System : Linux srv104790275 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : dewac4139 ( 1077) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /usr/share/doc/dovecot-core/wiki/ |
Upload File : |
Apparmor plugin
===============
A simple plugin which allows changing "hat" (apparmor context) when user is
loaded. Context is changed back to default on user deinit. Multiple hats are
supported, and passed to apparmor_change_hatv function. Since v2.2.32.
Configuration
-------------
---%<-------------------------------------------------------------------------
mail_plugins = $mail_plugins apparmor
plugin {
apparmor_hat = hat_name
apparmor_hat2 = another_hat
}
---%<-------------------------------------------------------------------------
You can also specify hats from user or password database. If you provide from
passdb, use userdb_apparmor_hat=hat and subsequent hats as userdb_apparmor_hat2
and so forth. From userdb, you can omit the userdb_ prefix.
It's also possible to combine these, so that you can provide some of the hats
from config and some from passdb/userdb configuration. If you want to provide
apparmor_hat2 from config, make sure you provide apparmor_hat from userdb or
passdb always, otherwise apparmor_hat2 won't be seen.
Debugging
---------
Set mail_debug=yes to see context changes.
(This file was created from the wiki on 2019-06-19 12:42)