from Config import * # "Dovecot IMAP server" is a perfectly good summary addFilter("name-repeated-in-summary C Dovecot"); # Technical terms spelled correctly addFilter("spelling-error %description -l en_US maildir -> "); addFilter("spelling-error %description -l en_US mbox -> "); addFilter("spelling-error Summary\(en_US\) Postgres -> "); # %{_prefix}/lib/tmpfiles.d is the correct place for tmpfiles snippets addFilter("hardcoded-library-path in %{_prefix}/lib/tmpfiles.d"); addFilter("only-non-binary-in-usr-lib"); # Have directories in /var/run available immediately after install, without a reboot # Also maintained by tmpfiles snippets for post-reboot consistency addFilter("dir-or-file-in-var-run /var/run/dovecot/login"); addFilter("dir-or-file-in-var-run /var/run/dovecot/empty"); addFilter("dir-or-file-in-var-run /var/run/dovecot"); addFilter("dir-or-file-in-var-run /var/run/dovecot/token-login"); # Need macros to work when uncommenting them out addFilter("macro-in-comment %{sieve_version}"); addFilter("macro-in-comment %{phsnap}"); # Cert/Key permissions as intended addFilter("non-readable /etc/pki/dovecot/certs/dovecot.pem 600"); addFilter("non-readable /etc/pki/dovecot/private/dovecot.pem 600"); # Crypto policy is followed using configuration file setting (PROFILE=SYSTEM) addFilter("crypto-policy-non-compliance-openssl") # Directory ownership and permissions as intended addFilter("non-standard-dir-perm /var/lib/dovecot 750"); addFilter("non-standard-gid /var/run/dovecot/login dovenull"); addFilter("non-standard-dir-perm /var/run/dovecot/login 750"); addFilter("non-standard-gid /var/run/dovecot/token-login dovenull"); addFilter("non-standard-dir-perm /var/run/dovecot/token-login 750"); # scriptlets are well tested addFilter("dangerous-command-in-%pre rm"); addFilter("dangerous-command-in-%post cp"); addFilter("dangerous-command-in-%preun rm"); addFilter("dangerous-command-in-%postun rm"); addFilter("dangerous-command-in-%posttrans rm"); # Documentation all in main package addFilter("no-documentation"); # INSTALL file also includes configuration addFilter("install-file-in-docs /usr/share/doc/dovecot-pigeonhole.*/INSTALL");