module kolab-local 1.0.20; require { type cyrus_t; type spamc_exec_t; type var_log_t; type postfix_master_t; class file { read write append open execute execute_no_trans getattr ioctl lock execute_no_trans entrypoint }; class lnk_file { getattr read }; class dir { getattr search open read lock ioctl }; class sock_file { getattr open read write append }; class unix_stream_socket { connectto }; } domain_entry_file(cyrus_t, spamc_exec_t); #============= cyrus_t ============== mta_read_config(cyrus_t); spamassassin_read_lib_files(cyrus_t); mysql_stream_connect(cyrus_t); #============= postfix_master_t ============== allow postfix_master_t var_log_t:file { write open };