From 224f21142d7ff1bf562f80751d42ae0adfbc16d6 Mon Sep 17 00:00:00 2001
From: Greg Sutcliffe <fedora@emeraldreverie.org>
Date: Fri, 26 Sep 2025 11:19:41 +0100
Subject: [PATCH] Zabbix/Postfix: Remove old pp file and add new exception for
 postfix_etc_t

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
---
 roles/base/files/postfix/zabbix-selinux.pp | Bin 1525 -> 0 bytes
 roles/base/files/postfix/zabbix-selinux.te |   5 ++++-
 2 files changed, 4 insertions(+), 1 deletion(-)
 delete mode 100644 roles/base/files/postfix/zabbix-selinux.pp

diff --git a/roles/base/files/postfix/zabbix-selinux.pp b/roles/base/files/postfix/zabbix-selinux.pp
deleted file mode 100644
index 9a6ab878180799a5b80f9b4cb2512917eec39c22..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1525
zcmb`HO-{ow5QRheT>%^RJpmG&z#De3;s93Cnko=dDRrd^aRtPAS;2g%pK6LCRVpLB
zneoi?jN{n;{C@vBD2f7H8a`}%VfOKEd|$WA)%amPT{dB4p(_KlGXnzct*okg<rkry
zzLs@!XrY_yTW4llr~r;qf=bW<@>Dm01uzb)Fj>an+qsWj*)Es^zYFE`)GT!pM~hK;
zEYh?uo|2-^LM&tK@=8?H_h6BE^&BSAcdj3;)sQbro~J%IPF6i^SU6OY5GOuD;&X>c
zRo(i?E{mX5I*UoP^_~s!@!aC<fu=xns3hr!m9x-B9~B+4s-nj5w1xOCL3uhOuGbsI
z7>FlJEEnS7Bw2DUL34KP!8#Gw>y1(mPKIj20UG~D4{E5FxqW??VvKj~p%c#BT&S%c
zc^uzm0eqlu(}g1@apnMVICO~X^;+%XkBkZrs22N-xCF(A)&UoBy<V$*{H)Ag?#O0y
yrg&BO27&*h*G4f}a(YsjuehFw{uxjZ%ahPw`#i|s*t+I<nk)bNTIX3y{*fO5L}9J~

diff --git a/roles/base/files/postfix/zabbix-selinux.te b/roles/base/files/postfix/zabbix-selinux.te
index 93f4543bd6..f9c2baff9f 100644
--- a/roles/base/files/postfix/zabbix-selinux.te
+++ b/roles/base/files/postfix/zabbix-selinux.te
@@ -1,4 +1,4 @@
-module zabbix_sendmail 1.2;
+module zabbix_sendmail 1.3;
 
 require {
        type sendmail_exec_t;
@@ -19,3 +19,6 @@ allow zabbix_agent_t bin_t:lnk_file read;
 
 # For symlink in /etc/alternatives
 allow zabbix_agent_t etc_t:lnk_file read;
+
+# Allow it to read main.cf
+allow zabbix_agent_t postfix_etc_t:file read;