module kolab-local 1.0.5; require { type cyrus_t; type spamc_exec_t; type spamd_var_lib_t; type etc_mail_t; type var_log_t; type init_t; type postfix_master_t; class file { read write append open execute execute_no_trans getattr ioctl }; class dir { search }; } #============= cyrus_t ============== allow cyrus_t init_t:file { read open }; allow cyrus_t etc_mail_t:dir search; allow cyrus_t spamc_exec_t:file { read open execute execute_no_trans getattr ioctl }; allow cyrus_t spamd_var_lib_t:dir search; #============= postfix_master_t ============== #allow postfix_master_t var_log_t:file { append open }; allow postfix_master_t var_log_t:file { write open };