From Debian package 0.0.20080702-14 Add support for Exim. Mark it as a delivering mailserver. Updated for UBAC Parts merged in r2984 From Debian package 0.0.20090621: Don't remove exim_read_user_files/exim_manage_user_files booleans Index: policy/modules/services/exim.te =================================================================== --- policy/modules/services/exim.te.orig +++ policy/modules/services/exim.te @@ -52,6 +52,11 @@ # exim local policy # +ifdef(`distro_debian', ` +# for /var/lib/exim4/config.autogenerated +files_read_var_lib_files(exim_t) +') + allow exim_t self:capability { chown dac_override dac_read_search fowner setuid setgid sys_resource }; allow exim_t self:process { setrlimit setpgid }; allow exim_t self:fifo_file rw_fifo_file_perms;