spamassassin policy

[Russell Coker <russell@xxxxxxxxxxxx>]

The attached patch seems necessary for spamassassin to work correctly.  
Without it spamassassin on my system will categorise everything as spam.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--- macros/program/spamassassin_macros.te.orig	2005-08-10 16:03:08.000000000 +1000
+++ macros/program/spamassassin_macros.te	2005-08-10 16:04:22.000000000 +1000
@@ -84,7 +84,8 @@
 
 spamassassin_agent_privs($1_spamassassin_t, $1)
 
-# set tunable if you have spamassassin do DNS lookups
+can_resolve($1_spamassassin_t)
+# set tunable if you give spamassassin full network access.
 if (spamassasin_can_network) {
 can_network($1_spamassassin_t)
 allow $1_spamassassin_t port_type:tcp_socket name_connect;