# ------------------------------------------------------------------
#
#    Copyright (C) 2014 Canonical, Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# used with dovecot/*

  capability setgid,

  deny capability block_suspend,

  # dovecot's master can send us signals
  signal receive peer=/usr/sbin/dovecot,

  /{var/,}run/dovecot/config rw,