(roleattribute user_mail_roles)
(roletype user_mail_roles user_mail_t)
(roleattribute admin_mail_roles)
(roletype admin_mail_roles admin_mail_t)
(typeattribute mailcontent_type)
(typeattribute mta_exec_type)
(typeattributeset mta_exec_type (sendmail_exec_t ))
(typeattribute mta_user_agent)
(typeattribute mailserver_delivery)
(typeattribute mailserver_domain)
(typeattribute mailserver_sender)
(typeattribute user_mail_domain)
(typeattributeset user_mail_domain (system_mail_t user_mail_t admin_mail_t ))
(type etc_aliases_t)
(roletype object_r etc_aliases_t)
(type etc_mail_t)
(roletype object_r etc_mail_t)
(type mail_home_t)
(roletype object_r mail_home_t)
(type mail_home_rw_t)
(roletype object_r mail_home_rw_t)
(type mqueue_spool_t)
(roletype object_r mqueue_spool_t)
(type mail_spool_t)
(roletype object_r mail_spool_t)
(type sendmail_exec_t)
(roletype object_r sendmail_exec_t)
(type system_mail_t)
(roletype object_r system_mail_t)
(type system_mail_tmp_t)
(roletype object_r system_mail_tmp_t)
(type user_mail_t)
(roletype object_r user_mail_t)
(type user_mail_tmp_t)
(roletype object_r user_mail_tmp_t)
(type admin_mail_t)
(roletype object_r admin_mail_t)
(type admin_mail_tmp_t)
(roletype object_r admin_mail_tmp_t)
(roleattributeset cil_gen_require system_r)
(roletype system_r system_mail_t)
(typeattributeset cil_gen_require mta_exec_type)
(typeattributeset mta_exec_type (sendmail_exec_t ))
(typeattributeset cil_gen_require user_mail_domain)
(typeattributeset user_mail_domain (system_mail_t user_mail_t admin_mail_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (etc_aliases_t etc_mail_t mail_home_t mail_home_rw_t mqueue_spool_t mail_spool_t sendmail_exec_t system_mail_tmp_t user_mail_tmp_t admin_mail_tmp_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (etc_aliases_t etc_mail_t mail_home_t mail_home_rw_t mqueue_spool_t mail_spool_t sendmail_exec_t system_mail_tmp_t user_mail_tmp_t admin_mail_tmp_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (etc_aliases_t etc_mail_t mail_home_t mail_home_rw_t mqueue_spool_t mail_spool_t sendmail_exec_t system_mail_tmp_t user_mail_tmp_t admin_mail_tmp_t ))
(typeattributeset cil_gen_require configfile)
(typeattributeset configfile (etc_mail_t ))
(typeattributeset cil_gen_require user_home_content_type)
(typeattributeset user_home_content_type (mail_home_t mail_home_rw_t ))
(typeattributeset cil_gen_require user_home_t)
(typeattributeset cil_gen_require polymember)
(typeattributeset polymember (mail_home_t mail_home_rw_t system_mail_tmp_t user_mail_tmp_t admin_mail_tmp_t ))
(typeattributeset cil_gen_require ubac_constrained_type)
(typeattributeset ubac_constrained_type (mail_home_t mail_home_rw_t user_mail_t user_mail_tmp_t admin_mail_t ))
(typeattributeset cil_gen_require mountpoint)
(typeattributeset mountpoint (mqueue_spool_t mail_spool_t ))
(typeattributeset cil_gen_require sendmail_exec_t)
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (sendmail_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (sendmail_exec_t ))
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (system_mail_t user_mail_t admin_mail_t ))
(typeattributeset cil_gen_require domain)
(typeattributeset domain (system_mail_t user_mail_t admin_mail_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require security_t)
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (sendmail_exec_t ))
(typeattributeset cil_gen_require tmpfile)
(typeattributeset tmpfile (system_mail_tmp_t user_mail_tmp_t admin_mail_tmp_t ))
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (system_mail_t user_mail_t admin_mail_t ))
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require home_root_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require netlabel_peer_t)
(typeattributeset cil_gen_require netif_t)
(typeattributeset cil_gen_require node_t)
(typeattributeset cil_gen_require client_packet_type)
(typeattributeset cil_gen_require port_type)
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require urandom_device_t)
(typeattributeset cil_gen_require privfd)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_spool_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require filesystem_type)
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require cert_type)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require cifs_t)
(typeattributeset cil_gen_require nfs_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require random_device_t)
(typeattributeset cil_gen_require anon_inodefs_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require initrc_devpts_t)
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(allow mail_home_t user_home_t (filesystem (associate)))
(allow mail_home_rw_t user_home_t (filesystem (associate)))
(allow system_mail_t sendmail_exec_t (file (entrypoint)))
(allow system_mail_t sendmail_exec_t (file (ioctl read getattr lock map execute open)))
(allow system_mail_t system_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t system_mail_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow system_mail_t system_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t system_mail_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_mail_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_mail_t tmp_t dir system_mail_tmp_t)
(typetransition system_mail_t tmp_t file system_mail_tmp_t)
(allow user_mail_t sendmail_exec_t (file (entrypoint)))
(allow user_mail_t sendmail_exec_t (file (ioctl read getattr lock map execute open)))
(allow user_mail_t user_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t user_mail_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow user_mail_t user_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t user_mail_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_mail_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition user_mail_t tmp_t dir user_mail_tmp_t)
(typetransition user_mail_t tmp_t file user_mail_tmp_t)
(allow admin_mail_t sendmail_exec_t (file (entrypoint)))
(allow admin_mail_t sendmail_exec_t (file (ioctl read getattr lock map execute open)))
(allow admin_mail_t admin_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t admin_mail_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow admin_mail_t admin_mail_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t admin_mail_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow admin_mail_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition admin_mail_t tmp_t dir admin_mail_tmp_t)
(typetransition admin_mail_t tmp_t file admin_mail_tmp_t)
(allow user_mail_domain self (capability (chown setgid setuid)))
(allow user_mail_domain self (process (sigchld sigkill sigstop signull signal setrlimit)))
(allow user_mail_domain self (fifo_file (ioctl read write getattr lock append open)))
(allow user_mail_domain mta_exec_type (file (entrypoint)))
(allow user_mail_domain mail_home_t (file (ioctl read getattr lock append open)))
(allow user_mail_domain mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain mail_home_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow user_mail_domain mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain mail_home_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_mail_domain mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain mail_home_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow user_mail_domain user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain home_root_t (dir (getattr open search)))
(allow user_mail_domain home_root_t (lnk_file (read getattr)))
(allow user_mail_domain user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain home_root_t (dir (getattr open search)))
(allow user_mail_domain home_root_t (lnk_file (read getattr)))
(allow user_mail_domain etc_aliases_t (dir (getattr open search)))
(allow user_mail_domain etc_mail_t (dir (getattr open search)))
(allow user_mail_domain etc_aliases_t (file (ioctl read getattr lock open)))
(allow user_mail_domain etc_mail_t (file (ioctl read getattr lock open)))
(allow user_mail_domain mqueue_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain mail_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_domain mqueue_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_mail_domain mail_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_mail_domain mqueue_spool_t (dir (getattr open search)))
(allow user_mail_domain mail_spool_t (dir (getattr open search)))
(allow user_mail_domain mqueue_spool_t (lnk_file (read getattr)))
(allow user_mail_domain mail_spool_t (lnk_file (read getattr)))
(allow user_mail_domain mail_spool_t (fifo_file (ioctl read write getattr lock append open)))
(allow user_mail_domain sendmail_exec_t (lnk_file (read getattr)))
(allow user_mail_domain mta_exec_type (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow user_mail_domain sendmail_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_t (file (ioctl read getattr lock open)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_t (lnk_file (read getattr)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain sysctl_t (dir (getattr open search)))
(allow user_mail_domain sysctl_kernel_t (dir (getattr open search)))
(allow user_mail_domain sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain sysctl_t (dir (getattr open search)))
(allow user_mail_domain sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_net_t (dir (getattr open search)))
(allow user_mail_domain proc_net_t (file (ioctl read getattr lock open)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_net_t (dir (getattr open search)))
(allow user_mail_domain proc_net_t (lnk_file (read getattr)))
(allow user_mail_domain proc_t (dir (getattr open search)))
(allow user_mail_domain proc_net_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain kernel_t (system (module_request)))
(allow user_mail_domain netlabel_peer_t (peer (recv)))
(allow user_mail_domain netlabel_peer_t (tcp_socket (recvfrom)))
(allow user_mail_domain netlabel_peer_t (udp_socket (recvfrom)))
(allow user_mail_domain netlabel_peer_t (rawip_socket (recvfrom)))
(allow user_mail_domain netif_t (netif (ingress egress)))
(allow user_mail_domain node_t (node (recvfrom sendto)))
(allow user_mail_domain client_packet_type (packet (send)))
(allow user_mail_domain client_packet_type (packet (recv)))
(allow user_mail_domain port_type (tcp_socket (name_connect)))
(allow user_mail_domain bin_t (dir (getattr open search)))
(allow user_mail_domain bin_t (lnk_file (read getattr)))
(allow user_mail_domain usr_t (dir (getattr open search)))
(allow user_mail_domain bin_t (dir (getattr open search)))
(allow user_mail_domain bin_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow user_mail_domain device_t (dir (getattr open search)))
(allow user_mail_domain urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow user_mail_domain privfd (fd (use)))
(allow user_mail_domain etc_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain etc_t (dir (getattr open search)))
(allow user_mail_domain etc_runtime_t (file (ioctl read getattr lock open)))
(allow user_mail_domain etc_t (dir (getattr open search)))
(allow user_mail_domain etc_runtime_t (lnk_file (read getattr)))
(allow user_mail_domain usr_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain usr_t (dir (getattr open search)))
(allow user_mail_domain usr_t (file (ioctl read getattr lock open)))
(allow user_mail_domain usr_t (dir (getattr open search)))
(allow user_mail_domain usr_t (lnk_file (read getattr)))
(allow user_mail_domain var_t (dir (getattr open search)))
(allow user_mail_domain var_spool_t (dir (getattr open search)))
(dontaudit user_mail_domain var_run_t (lnk_file (read getattr)))
(dontaudit user_mail_domain var_run_t (dir (getattr open search)))
(allow user_mail_domain filesystem_type (filesystem (getattr)))
(allow user_mail_domain file_type (filesystem (getattr)))
(dontaudit user_mail_domain initrc_runtime_t (file (ioctl read write getattr lock append open)))
(allow user_mail_domain devlog_t (sock_file (write getattr append open)))
(allow user_mail_domain var_run_t (lnk_file (read getattr)))
(allow user_mail_domain var_t (dir (getattr open search)))
(allow user_mail_domain var_run_t (dir (getattr open search)))
(allow user_mail_domain init_runtime_t (dir (getattr open search)))
(allow user_mail_domain syslogd_runtime_t (dir (getattr open search)))
(allow user_mail_domain syslogd_t (unix_dgram_socket (sendto)))
(allow user_mail_domain syslogd_t (unix_stream_socket (connectto)))
(allow user_mail_domain self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow user_mail_domain self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow user_mail_domain device_t (dir (getattr open search)))
(allow user_mail_domain device_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain device_t (dir (getattr open search)))
(allow user_mail_domain device_t (lnk_file (read getattr)))
(allow user_mail_domain console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit user_mail_domain console_device_t (chr_file (ioctl read getattr lock open)))
(allow user_mail_domain cert_type (dir (ioctl read getattr lock open search)))
(allow user_mail_domain cert_type (dir (getattr open search)))
(allow user_mail_domain cert_type (file (ioctl read getattr lock open)))
(allow user_mail_domain cert_type (dir (getattr open search)))
(allow user_mail_domain cert_type (lnk_file (read getattr)))
(allow user_mail_domain etc_t (dir (getattr open search)))
(allow user_mail_domain etc_t (lnk_file (read getattr)))
(allow user_mail_domain usr_t (dir (getattr open search)))
(allow user_mail_domain locale_t (dir (ioctl read getattr lock open search)))
(allow user_mail_domain locale_t (dir (getattr open search)))
(allow user_mail_domain locale_t (file (ioctl read getattr lock open)))
(allow user_mail_domain locale_t (dir (getattr open search)))
(allow user_mail_domain locale_t (lnk_file (read getattr)))
(allow user_mail_domain locale_t (file (map)))
(allow system_mail_t self (capability (dac_override fowner)))
(allow system_mail_t etc_mail_t (dir (getattr open search)))
(allow system_mail_t etc_mail_t (file (ioctl read getattr lock open)))
(allow system_mail_t mailcontent_type (dir (getattr open search)))
(allow system_mail_t mailcontent_type (file (ioctl read getattr lock open)))
(allow system_mail_t mail_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t home_root_t (dir (getattr open search)))
(allow system_mail_t home_root_t (lnk_file (read getattr)))
(allow system_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t home_root_t (dir (getattr open search)))
(allow system_mail_t home_root_t (lnk_file (read getattr)))
(allow system_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t home_root_t (dir (getattr open search)))
(allow system_mail_t home_root_t (lnk_file (read getattr)))
(allow system_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_mail_t home_root_t (dir (getattr open search)))
(allow system_mail_t home_root_t (lnk_file (read getattr)))
(allow system_mail_t user_mail_domain (dir (ioctl read getattr lock open search)))
(allow system_mail_t user_mail_domain (file (ioctl read getattr lock open)))
(allow system_mail_t user_mail_domain (lnk_file (read getattr)))
(allow system_mail_t bin_t (dir (getattr open search)))
(allow system_mail_t bin_t (lnk_file (read getattr)))
(allow system_mail_t usr_t (dir (getattr open search)))
(allow system_mail_t bin_t (dir (getattr open search)))
(allow system_mail_t bin_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow system_mail_t device_t (dir (getattr open search)))
(allow system_mail_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow system_mail_t sysfs_t (dir (getattr open search)))
(allow system_mail_t sysfs_t (file (ioctl read getattr lock open)))
(allow system_mail_t sysfs_t (dir (getattr open search)))
(allow system_mail_t sysfs_t (lnk_file (read getattr)))
(allow system_mail_t sysfs_t (dir (getattr open search)))
(allow system_mail_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t anon_inodefs_t (dir (getattr open search)))
(allow system_mail_t anon_inodefs_t (file (ioctl read write getattr lock append open)))
(allow system_mail_t security_t (filesystem (getattr)))
(allow system_mail_t sysfs_t (filesystem (getattr)))
(allow system_mail_t sysfs_t (dir (getattr open search)))
(allow system_mail_t sysfs_t (dir (getattr open search)))
(dontaudit system_mail_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(allow system_mail_t device_t (dir (getattr open search)))
(allow system_mail_t device_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t device_t (dir (getattr open search)))
(allow system_mail_t device_t (lnk_file (read getattr)))
(allow system_mail_t devpts_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t initrc_devpts_t (chr_file (ioctl read write getattr lock append open)))
(allow system_mail_t init_t (fd (use)))
(allow system_mail_t init_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow system_mail_t device_t (dir (getattr open search)))
(allow system_mail_t device_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t device_t (dir (getattr open search)))
(allow system_mail_t device_t (lnk_file (read getattr)))
(allow system_mail_t devpts_t (dir (ioctl read getattr lock open search)))
(allow system_mail_t user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow system_mail_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow mta_user_agent device_t (dir (getattr open search)))
(allow mta_user_agent device_t (dir (ioctl read getattr lock open search)))
(allow mta_user_agent device_t (dir (getattr open search)))
(allow mta_user_agent device_t (lnk_file (read getattr)))
(allow mta_user_agent devpts_t (dir (ioctl read getattr lock open search)))
(allow mta_user_agent user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow mta_user_agent user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow mailserver_delivery self (fifo_file (ioctl read write getattr lock append open)))
(allow mailserver_delivery mail_spool_t (dir (ioctl read getattr lock open search)))
(allow mailserver_delivery mail_spool_t (dir (ioctl write getattr lock open add_name search)))
(allow mailserver_delivery mail_spool_t (file (create getattr open)))
(allow mailserver_delivery mail_spool_t (dir (getattr open search)))
(allow mailserver_delivery mail_spool_t (file (ioctl read getattr lock open)))
(allow mailserver_delivery mail_spool_t (dir (getattr open search)))
(allow mailserver_delivery mail_spool_t (file (ioctl getattr lock append open)))
(allow mailserver_delivery mail_spool_t (dir (ioctl write getattr lock open add_name search)))
(allow mailserver_delivery mail_spool_t (lnk_file (create getattr)))
(allow mailserver_delivery mail_spool_t (dir (getattr open search)))
(allow mailserver_delivery mail_spool_t (lnk_file (read getattr)))
(allow mailserver_delivery mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery mail_home_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow mailserver_delivery mail_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery mail_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow mailserver_delivery mail_home_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow mailserver_delivery mail_home_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery mail_home_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow mailserver_delivery home_root_t (dir (getattr open search)))
(allow mailserver_delivery home_root_t (lnk_file (read getattr)))
(allow mailserver_delivery system_mail_tmp_t (dir (getattr open search)))
(allow mailserver_delivery system_mail_tmp_t (file (ioctl read getattr lock open)))
(allow user_mail_t mail_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t mail_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t home_root_t (dir (getattr open search)))
(allow user_mail_t home_root_t (lnk_file (read getattr)))
(allow user_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t home_root_t (dir (getattr open search)))
(allow user_mail_t home_root_t (lnk_file (read getattr)))
(allow user_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t home_root_t (dir (getattr open search)))
(allow user_mail_t home_root_t (lnk_file (read getattr)))
(allow user_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow user_mail_t home_root_t (dir (getattr open search)))
(allow user_mail_t home_root_t (lnk_file (read getattr)))
(allow user_mail_t sysfs_t (dir (getattr open search)))
(allow user_mail_t sysfs_t (file (ioctl read getattr lock open)))
(allow user_mail_t sysfs_t (dir (getattr open search)))
(allow user_mail_t sysfs_t (lnk_file (read getattr)))
(allow user_mail_t sysfs_t (dir (getattr open search)))
(allow user_mail_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow user_mail_t device_t (dir (getattr open search)))
(allow user_mail_t device_t (dir (ioctl read getattr lock open search)))
(allow user_mail_t device_t (dir (getattr open search)))
(allow user_mail_t device_t (lnk_file (read getattr)))
(allow user_mail_t devpts_t (dir (ioctl read getattr lock open search)))
(allow user_mail_t user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow user_mail_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow admin_mail_t mail_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t mail_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow admin_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t home_root_t (dir (getattr open search)))
(allow admin_mail_t home_root_t (lnk_file (read getattr)))
(allow admin_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t home_root_t (dir (getattr open search)))
(allow admin_mail_t home_root_t (lnk_file (read getattr)))
(allow admin_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t home_root_t (dir (getattr open search)))
(allow admin_mail_t home_root_t (lnk_file (read getattr)))
(allow admin_mail_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_mail_t home_root_t (dir (getattr open search)))
(allow admin_mail_t home_root_t (lnk_file (read getattr)))
(allow admin_mail_t sysfs_t (dir (getattr open search)))
(allow admin_mail_t sysfs_t (file (ioctl read getattr lock open)))
(allow admin_mail_t sysfs_t (dir (getattr open search)))
(allow admin_mail_t sysfs_t (lnk_file (read getattr)))
(allow admin_mail_t sysfs_t (dir (getattr open search)))
(allow admin_mail_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow admin_mail_t device_t (dir (getattr open search)))
(allow admin_mail_t device_t (dir (ioctl read getattr lock open search)))
(allow admin_mail_t device_t (dir (getattr open search)))
(allow admin_mail_t device_t (lnk_file (read getattr)))
(allow admin_mail_t devpts_t (dir (ioctl read getattr lock open search)))
(allow admin_mail_t user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow admin_mail_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow admin_mail_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition admin_mail_t etc_t file etc_aliases_t)
(allow admin_mail_t etc_aliases_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(typetransition admin_mail_t user_home_dir_t file "dead.letter" mail_home_t)
(typetransition admin_mail_t user_home_dir_t file ".mailrc" mail_home_t)
(typetransition admin_mail_t user_home_dir_t file ".forward" mail_home_t)
(typetransition admin_mail_t user_home_dir_t file ".esmtp_queue" mail_home_t)
(typetransition user_mail_t user_home_dir_t file "dead.letter" mail_home_t)
(typetransition user_mail_t user_home_dir_t file ".mailrc" mail_home_t)
(typetransition user_mail_t user_home_dir_t file ".forward" mail_home_t)
(typetransition user_mail_t user_home_dir_t file ".esmtp_queue" mail_home_t)
(typetransition mailserver_delivery user_home_dir_t dir ".maildir" mail_home_rw_t)
(typetransition mailserver_delivery user_home_dir_t dir "Maildir" mail_home_rw_t)
(typetransition mailserver_delivery user_home_dir_t file "dead.letter" mail_home_t)
(typetransition mailserver_delivery user_home_dir_t file ".mailrc" mail_home_t)
(typetransition mailserver_delivery user_home_dir_t file ".forward" mail_home_t)
(typetransition mailserver_delivery user_home_dir_t file ".esmtp_queue" mail_home_t)
(typetransition system_mail_t user_home_dir_t file "dead.letter" mail_home_t)
(typetransition system_mail_t user_home_dir_t file ".mailrc" mail_home_t)
(typetransition system_mail_t user_home_dir_t file ".forward" mail_home_t)
(typetransition system_mail_t user_home_dir_t file ".esmtp_queue" mail_home_t)
(typetransition user_mail_domain user_home_dir_t dir ".maildir" mail_home_rw_t)
(typetransition user_mail_domain user_home_dir_t dir "Maildir" mail_home_rw_t)
(booleanif (use_nfs_home_dirs)
    (true
        (allow user_mail_domain nfs_t (lnk_file (read getattr)))
        (allow user_mail_domain nfs_t (dir (getattr open search)))
        (allow user_mail_domain nfs_t (dir (ioctl read getattr lock open search)))
        (allow user_mail_domain nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow user_mail_domain nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow user_mail_domain nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow mailserver_delivery nfs_t (lnk_file (read getattr)))
        (allow mailserver_delivery nfs_t (dir (getattr open search)))
        (allow mailserver_delivery nfs_t (dir (ioctl read getattr lock open search)))
        (allow mailserver_delivery nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow mailserver_delivery nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow mailserver_delivery nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (use_samba_home_dirs)
    (true
        (allow user_mail_domain cifs_t (lnk_file (read getattr)))
        (allow user_mail_domain cifs_t (dir (getattr open search)))
        (allow user_mail_domain cifs_t (dir (ioctl read getattr lock open search)))
        (allow user_mail_domain cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow user_mail_domain cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow user_mail_domain cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow mailserver_delivery cifs_t (lnk_file (read getattr)))
        (allow mailserver_delivery cifs_t (dir (getattr open search)))
        (allow mailserver_delivery cifs_t (dir (ioctl read getattr lock open search)))
        (allow mailserver_delivery cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow mailserver_delivery cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow mailserver_delivery cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(optional mta_optional_2
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (mqueue_spool_t ))
    (optional mta_optional_3
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (mail_spool_t ))
    )
)
(optional mta_optional_4
    (typeattributeset cil_gen_require init_t)
    (allow system_mail_t init_t (process (sigchld)))
    (allow system_mail_t init_t (process (signull)))
    (optional mta_optional_5
        (typeattributeset cil_gen_require rpm_t)
        (allow system_mail_t rpm_t (fd (use)))
        (allow system_mail_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional mta_optional_6
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit system_mail_t security_t (filesystem (getattr)))
        (dontaudit system_mail_t sysfs_t (filesystem (getattr)))
        (dontaudit system_mail_t sysfs_t (dir (getattr open search)))
        (dontaudit system_mail_t security_t (dir (getattr open search)))
        (dontaudit system_mail_t security_t (file (ioctl read getattr lock open)))
        (optional mta_optional_7
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit system_mail_t selinux_config_t (dir (getattr open search)))
            (dontaudit system_mail_t selinux_config_t (file (ioctl read getattr lock open)))
        )
        (optional mta_optional_8
            (typeattributeset cil_gen_require postfix_user_domtrans)
            (typeattributeset cil_gen_require postfix_user_domtrans)
            (typeattributeset postfix_user_domtrans (system_mail_t ))
        )
        (optional mta_optional_9
            (typeattributeset cil_gen_require init_t)
            (allow user_mail_t init_t (process (sigchld)))
            (allow user_mail_t init_t (process (signull)))
            (optional mta_optional_10
                (typeattributeset cil_gen_require rpm_t)
                (allow user_mail_t rpm_t (fd (use)))
                (allow user_mail_t rpm_t (fifo_file (ioctl read getattr lock open)))
            )
            (optional mta_optional_11
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (dontaudit user_mail_t security_t (filesystem (getattr)))
                (dontaudit user_mail_t sysfs_t (filesystem (getattr)))
                (dontaudit user_mail_t sysfs_t (dir (getattr open search)))
                (dontaudit user_mail_t security_t (dir (getattr open search)))
                (dontaudit user_mail_t security_t (file (ioctl read getattr lock open)))
                (optional mta_optional_12
                    (typeattributeset cil_gen_require selinux_config_t)
                    (dontaudit user_mail_t selinux_config_t (dir (getattr open search)))
                    (dontaudit user_mail_t selinux_config_t (file (ioctl read getattr lock open)))
                )
                (optional mta_optional_13
                    (typeattributeset cil_gen_require postfix_user_domtrans)
                    (typeattributeset cil_gen_require postfix_user_domtrans)
                    (typeattributeset postfix_user_domtrans (user_mail_t ))
                )
                (optional mta_optional_14
                    (typeattributeset cil_gen_require init_t)
                    (allow user_mail_t init_t (process (sigchld)))
                    (allow user_mail_t init_t (process (signull)))
                    (optional mta_optional_15
                        (typeattributeset cil_gen_require rpm_t)
                        (allow user_mail_t rpm_t (fd (use)))
                        (allow user_mail_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional mta_optional_16
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit user_mail_t security_t (filesystem (getattr)))
                        (dontaudit user_mail_t sysfs_t (filesystem (getattr)))
                        (dontaudit user_mail_t sysfs_t (dir (getattr open search)))
                        (dontaudit user_mail_t security_t (dir (getattr open search)))
                        (dontaudit user_mail_t security_t (file (ioctl read getattr lock open)))
                        (optional mta_optional_17
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit user_mail_t selinux_config_t (dir (getattr open search)))
                            (dontaudit user_mail_t selinux_config_t (file (ioctl read getattr lock open)))
                        )
                        (optional mta_optional_18
                            (typeattributeset cil_gen_require init_t)
                            (allow admin_mail_t init_t (process (sigchld)))
                            (allow admin_mail_t init_t (process (signull)))
                            (optional mta_optional_19
                                (typeattributeset cil_gen_require rpm_t)
                                (allow admin_mail_t rpm_t (fd (use)))
                                (allow admin_mail_t rpm_t (fifo_file (ioctl read getattr lock open)))
                            )
                            (optional mta_optional_20
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (dontaudit admin_mail_t security_t (filesystem (getattr)))
                                (dontaudit admin_mail_t sysfs_t (filesystem (getattr)))
                                (dontaudit admin_mail_t sysfs_t (dir (getattr open search)))
                                (dontaudit admin_mail_t security_t (dir (getattr open search)))
                                (dontaudit admin_mail_t security_t (file (ioctl read getattr lock open)))
                                (optional mta_optional_21
                                    (typeattributeset cil_gen_require selinux_config_t)
                                    (dontaudit admin_mail_t selinux_config_t (dir (getattr open search)))
                                    (dontaudit admin_mail_t selinux_config_t (file (ioctl read getattr lock open)))
                                )
                                (optional mta_optional_22
                                    (typeattributeset cil_gen_require postfix_user_domtrans)
                                    (typeattributeset cil_gen_require postfix_user_domtrans)
                                    (typeattributeset postfix_user_domtrans (admin_mail_t ))
                                )
                                (optional mta_optional_23
                                    (typeattributeset cil_gen_require init_t)
                                    (allow admin_mail_t init_t (process (sigchld)))
                                    (allow admin_mail_t init_t (process (signull)))
                                    (optional mta_optional_24
                                        (typeattributeset cil_gen_require rpm_t)
                                        (allow admin_mail_t rpm_t (fd (use)))
                                        (allow admin_mail_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                    )
                                    (optional mta_optional_25
                                        (typeattributeset cil_gen_require security_t)
                                        (typeattributeset cil_gen_require sysfs_t)
                                        (dontaudit admin_mail_t security_t (filesystem (getattr)))
                                        (dontaudit admin_mail_t sysfs_t (filesystem (getattr)))
                                        (dontaudit admin_mail_t sysfs_t (dir (getattr open search)))
                                        (dontaudit admin_mail_t security_t (dir (getattr open search)))
                                        (dontaudit admin_mail_t security_t (file (ioctl read getattr lock open)))
                                        (optional mta_optional_26
                                            (typeattributeset cil_gen_require selinux_config_t)
                                            (dontaudit admin_mail_t selinux_config_t (dir (getattr open search)))
                                            (dontaudit admin_mail_t selinux_config_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional mta_optional_27
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require courier_spool_t)
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain courier_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain courier_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain courier_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain courier_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain courier_spool_t (fifo_file (ioctl read write getattr lock append open)))
                                        )
                                        (optional mta_optional_28
                                            (typeattributeset cil_gen_require bin_t)
                                            (typeattributeset cil_gen_require usr_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_spool_t)
                                            (typeattributeset cil_gen_require exim_t)
                                            (typeattributeset cil_gen_require exim_exec_t)
                                            (typeattributeset cil_gen_require exim_log_t)
                                            (typeattributeset cil_gen_require var_log_t)
                                            (typeattributeset cil_gen_require exim_spool_t)
                                            (typeattributeset cil_gen_require exim_var_lib_t)
                                            (typeattributeset cil_gen_require var_lib_t)
                                            (allow user_mail_domain bin_t (dir (getattr open search)))
                                            (allow user_mail_domain bin_t (lnk_file (read getattr)))
                                            (allow user_mail_domain usr_t (dir (getattr open search)))
                                            (allow user_mail_domain exim_exec_t (file (ioctl read getattr map execute open)))
                                            (allow user_mail_domain exim_t (process (transition)))
                                            (dontaudit user_mail_domain exim_t (process (noatsecure siginh rlimitinh)))
                                            (typetransition user_mail_domain exim_exec_t process exim_t)
                                            (allow exim_t user_mail_domain (fd (use)))
                                            (allow exim_t user_mail_domain (fifo_file (ioctl read write getattr lock append)))
                                            (allow exim_t user_mail_domain (process (sigchld)))
                                            (allow user_mail_domain exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain exim_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_log_t (dir (getattr open search)))
                                            (allow user_mail_domain var_log_t (lnk_file (read getattr)))
                                            (allow user_mail_domain exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain exim_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_spool_t (dir (getattr open search)))
                                            (allow user_mail_domain exim_var_lib_t (dir (getattr open search)))
                                            (allow user_mail_domain exim_var_lib_t (file (ioctl read getattr lock open)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_lib_t (dir (getattr open search)))
                                        )
                                        (optional mta_optional_29
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require bin_t)
                                            (typeattributeset cil_gen_require usr_t)
                                            (typeattributeset cil_gen_require etc_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_spool_t)
                                            (typeattributeset cil_gen_require postfix_master_exec_t)
                                            (typeattributeset cil_gen_require postfix_etc_t)
                                            (typeattributeset cil_gen_require postfix_spool_t)
                                            (typeattributeset cil_gen_require postfix_master_t)
                                            (allow user_mail_domain tmp_t (dir (getattr)))
                                            (allow user_mail_domain bin_t (dir (getattr open search)))
                                            (allow user_mail_domain bin_t (lnk_file (read getattr)))
                                            (allow user_mail_domain usr_t (dir (getattr open search)))
                                            (allow user_mail_domain postfix_master_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                            (allow user_mail_domain etc_t (dir (getattr open search)))
                                            (allow user_mail_domain postfix_etc_t (dir (ioctl read getattr lock open search)))
                                            (allow user_mail_domain postfix_etc_t (file (ioctl read getattr lock open)))
                                            (allow user_mail_domain postfix_etc_t (lnk_file (read getattr)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_spool_t (dir (getattr open search)))
                                            (allow user_mail_domain postfix_spool_t (dir (getattr open search)))
                                            (allow user_mail_domain postfix_master_t (fd (use)))
                                            (allow user_mail_domain postfix_master_t (fifo_file (ioctl read write getattr lock append)))
                                        )
                                        (optional mta_optional_30
                                            (typeattributeset cil_gen_require bin_t)
                                            (typeattributeset cil_gen_require usr_t)
                                            (typeattributeset cil_gen_require procmail_exec_t)
                                            (allow user_mail_domain bin_t (dir (getattr open search)))
                                            (allow user_mail_domain bin_t (lnk_file (read getattr)))
                                            (allow user_mail_domain usr_t (dir (getattr open search)))
                                            (allow user_mail_domain procmail_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                        )
                                        (optional mta_optional_31
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require qmail_inject_t)
                                            (typeattributeset cil_gen_require qmail_inject_exec_t)
                                            (allow user_mail_domain qmail_inject_exec_t (file (ioctl read getattr map execute open)))
                                            (allow user_mail_domain qmail_inject_t (process (transition)))
                                            (dontaudit user_mail_domain qmail_inject_t (process (noatsecure siginh rlimitinh)))
                                            (typetransition user_mail_domain qmail_inject_exec_t process qmail_inject_t)
                                            (allow qmail_inject_t user_mail_domain (fd (use)))
                                            (allow qmail_inject_t user_mail_domain (fifo_file (ioctl read write getattr lock append)))
                                            (allow qmail_inject_t user_mail_domain (process (sigchld)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                        )
                                        (optional mta_optional_32
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_log_t)
                                            (typeattributeset cil_gen_require sendmail_log_t)
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_log_t (dir (getattr open search)))
                                            (allow user_mail_domain var_log_t (lnk_file (read getattr)))
                                            (allow user_mail_domain sendmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain sendmail_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (typetransition user_mail_domain var_log_t file sendmail_log_t)
                                            (allow user_mail_domain var_log_t (lnk_file (read getattr)))
                                        )
                                        (optional mta_optional_33
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_spool_t)
                                            (typeattributeset cil_gen_require uucpd_spool_t)
                                            (allow user_mail_domain var_t (dir (getattr open search)))
                                            (allow user_mail_domain var_spool_t (dir (getattr open search)))
                                            (allow user_mail_domain uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain uucpd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                            (allow user_mail_domain uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain uucpd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow user_mail_domain uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow user_mail_domain uucpd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                        )
                                        (optional mta_optional_34
                                            (typeattributeset cil_gen_require apt_t)
                                            (typeattributeset cil_gen_require apt_devpts_t)
                                            (allow system_mail_t apt_t (fd (use)))
                                            (allow system_mail_t apt_devpts_t (chr_file (ioctl read write getattr append open)))
                                        )
                                        (optional mta_optional_35
                                            (typeattributeset cil_gen_require httpd_squirrelmail_t)
                                            (typeattributeset cil_gen_require httpd_log_t)
                                            (typeattributeset cil_gen_require httpd_t)
                                            (typeattributeset cil_gen_require httpd_sys_script_t)
                                            (allow system_mail_t httpd_squirrelmail_t (file (ioctl read getattr lock open)))
                                            (allow system_mail_t httpd_squirrelmail_t (file (ioctl getattr lock append open)))
                                            (dontaudit system_mail_t httpd_log_t (file (ioctl getattr lock append open)))
                                            (dontaudit system_mail_t httpd_t (unix_stream_socket (read write)))
                                            (dontaudit system_mail_t httpd_t (tcp_socket (read write)))
                                            (dontaudit system_mail_t httpd_sys_script_t (unix_stream_socket (read write)))
                                        )
                                        (optional mta_optional_36
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require arpwatch_tmp_t)
                                            (typeattributeset cil_gen_require arpwatch_t)
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t arpwatch_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (dontaudit system_mail_t arpwatch_t (packet_socket (read write)))
                                        )
                                        (optional mta_optional_37
                                            (typeattributeset cil_gen_require httpd_bugzilla_content_t)
                                            (typeattributeset cil_gen_require httpd_bugzilla_script_t)
                                            (allow system_mail_t httpd_bugzilla_content_t (dir (getattr open search)))
                                            (dontaudit system_mail_t httpd_bugzilla_script_t (unix_stream_socket (read write)))
                                        )
                                        (optional mta_optional_38
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_run_t)
                                            (typeattributeset cil_gen_require var_log_t)
                                            (typeattributeset cil_gen_require clam_scannable_type)
                                            (typeattributeset cil_gen_require clamd_t)
                                            (typeattributeset cil_gen_require clamd_runtime_t)
                                            (typeattributeset cil_gen_require clamd_var_log_t)
                                            (typeattributeset cil_gen_require clam_scannable_type)
                                            (typeattributeset clam_scannable_type (mqueue_spool_t ))
                                            (allow clamd_t system_mail_t (fd (use)))
                                            (allow system_mail_t var_run_t (lnk_file (read getattr)))
                                            (allow system_mail_t var_t (dir (getattr open search)))
                                            (allow system_mail_t var_run_t (dir (getattr open search)))
                                            (allow system_mail_t clamd_runtime_t (dir (getattr open search)))
                                            (allow system_mail_t clamd_runtime_t (sock_file (write getattr append open)))
                                            (allow system_mail_t clamd_t (unix_stream_socket (connectto)))
                                            (allow system_mail_t var_t (dir (getattr open search)))
                                            (allow system_mail_t var_log_t (dir (getattr open search)))
                                            (allow system_mail_t var_log_t (lnk_file (read getattr)))
                                            (allow system_mail_t clamd_var_log_t (dir (ioctl read getattr lock open search)))
                                            (allow system_mail_t clamd_var_log_t (dir (getattr open search)))
                                            (allow system_mail_t clamd_var_log_t (file (ioctl getattr lock append open)))
                                        )
                                        (optional mta_optional_39
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require system_cronjob_tmp_t)
                                            (typeattributeset cil_gen_require crond_t)
                                            (typeattributeset cil_gen_require system_cronjob_t)
                                            (typeattributeset cil_gen_require crond_tmp_t)
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t system_cronjob_tmp_t (file (ioctl read getattr lock open)))
                                            (dontaudit system_mail_t crond_t (fifo_file (write)))
                                            (allow system_mail_t system_cronjob_t (unix_stream_socket (read write)))
                                            (allow system_mail_t crond_tmp_t (file (ioctl read write getattr lock append open)))
                                        )
                                        (optional mta_optional_40
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_spool_t)
                                            (typeattributeset cil_gen_require courier_authdaemon_t)
                                            (typeattributeset cil_gen_require courier_runtime_t)
                                            (allow system_mail_t var_t (dir (getattr open search)))
                                            (allow system_mail_t var_spool_t (dir (getattr open search)))
                                            (allow system_mail_t courier_runtime_t (dir (getattr open search)))
                                            (allow system_mail_t courier_runtime_t (sock_file (write getattr append open)))
                                            (allow system_mail_t courier_authdaemon_t (unix_stream_socket (connectto)))
                                        )
                                        (optional mta_optional_41
                                            (typeattributeset cil_gen_require cvs_data_t)
                                            (allow system_mail_t cvs_data_t (dir (getattr open search)))
                                            (allow system_mail_t cvs_data_t (dir (ioctl read getattr lock open search)))
                                            (allow system_mail_t cvs_data_t (dir (getattr open search)))
                                            (allow system_mail_t cvs_data_t (file (ioctl read getattr lock open)))
                                            (allow system_mail_t cvs_data_t (dir (getattr open search)))
                                            (allow system_mail_t cvs_data_t (lnk_file (read getattr)))
                                        )
                                        (optional mta_optional_42
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_log_t)
                                            (typeattributeset cil_gen_require fail2ban_t)
                                            (typeattributeset cil_gen_require fail2ban_log_t)
                                            (typeattributeset cil_gen_require fail2ban_tmp_t)
                                            (dontaudit system_mail_t fail2ban_t (unix_stream_socket (read write)))
                                            (allow system_mail_t var_t (dir (getattr open search)))
                                            (allow system_mail_t var_log_t (dir (getattr open search)))
                                            (allow system_mail_t var_log_t (lnk_file (read getattr)))
                                            (allow system_mail_t fail2ban_log_t (file (ioctl getattr lock append open)))
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t fail2ban_tmp_t (file (ioctl read write getattr lock append)))
                                        )
                                        (optional mta_optional_43
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require logrotate_tmp_t)
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t logrotate_tmp_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional mta_optional_44
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require logwatch_tmp_t)
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t logwatch_tmp_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional mta_optional_45
                                            (typeattributeset cil_gen_require milter_data_type)
                                            (allow system_mail_t milter_data_type (dir (getattr open search)))
                                            (allow system_mail_t milter_data_type (sock_file (getattr)))
                                        )
                                        (optional mta_optional_46
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require nagios_tmp_t)
                                            (allow system_mail_t tmp_t (dir (getattr open search)))
                                            (allow system_mail_t nagios_tmp_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional mta_optional_47
                                            (typeattributeset cil_gen_require etc_t)
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow system_mail_t etc_aliases_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow system_mail_t etc_aliases_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow system_mail_t etc_aliases_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow system_mail_t etc_aliases_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (allow system_mail_t etc_aliases_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                            (allow system_mail_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                            (typetransition system_mail_t etc_t fifo_file etc_aliases_t)
                                            (typetransition system_mail_t etc_t sock_file etc_aliases_t)
                                            (typetransition system_mail_t etc_t lnk_file etc_aliases_t)
                                            (typetransition system_mail_t etc_t file etc_aliases_t)
                                            (optional mta_optional_48
                                                (typeattributeset cil_gen_require var_t)
                                                (typeattributeset cil_gen_require var_log_t)
                                                (typeattributeset cil_gen_require sxid_log_t)
                                                (allow system_mail_t var_t (dir (getattr open search)))
                                                (allow system_mail_t var_log_t (dir (getattr open search)))
                                                (allow system_mail_t var_log_t (lnk_file (read getattr)))
                                                (allow system_mail_t sxid_log_t (file (ioctl read getattr lock open)))
                                            )
                                            (optional mta_optional_49
                                                (typeattributeset cil_gen_require user_devpts_t)
                                                (dontaudit system_mail_t user_devpts_t (chr_file (ioctl read write getattr lock append open)))
                                                (optional mta_optional_50
                                                    (typeattributeset cil_gen_require system_cronjob_tmp_t)
                                                    (dontaudit system_mail_t system_cronjob_tmp_t (file (ioctl getattr lock append open)))
                                                )
                                                (optional mta_optional_51
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_run_t)
                                                    (typeattributeset cil_gen_require spamd_t)
                                                    (typeattributeset cil_gen_require spamd_runtime_t)
                                                    (allow system_mail_t var_run_t (lnk_file (read getattr)))
                                                    (allow system_mail_t var_t (dir (getattr open search)))
                                                    (allow system_mail_t var_run_t (dir (getattr open search)))
                                                    (allow system_mail_t spamd_runtime_t (dir (getattr open search)))
                                                    (allow system_mail_t spamd_runtime_t (sock_file (write getattr append open)))
                                                    (allow system_mail_t spamd_t (unix_stream_socket (connectto)))
                                                )
                                                (optional mta_optional_52
                                                    (typeattributeset cil_gen_require tmp_t)
                                                    (typeattributeset cil_gen_require fsdaemon_tmp_t)
                                                    (allow system_mail_t tmp_t (dir (getattr open search)))
                                                    (allow system_mail_t fsdaemon_tmp_t (file (ioctl read getattr lock open)))
                                                )
                                                (optional mta_optional_53
                                                    (typeattributeset cil_gen_require sympa_t)
                                                    (typeattributeset cil_gen_require sympa_var_t)
                                                    (allow system_mail_t sympa_t (fd (use)))
                                                    (allow system_mail_t sympa_var_t (file (ioctl getattr lock append)))
                                                    (dontaudit system_mail_t sympa_t (tcp_socket (read write)))
                                                )
                                                (optional mta_optional_54
                                                    (typeattributeset cil_gen_require unconfined_t)
                                                    (allow system_mail_t unconfined_t (fd (use)))
                                                )
                                                (optional mta_optional_55
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_log_t)
                                                    (typeattributeset cil_gen_require httpd_log_t)
                                                    (allow mta_user_agent var_t (dir (getattr open search)))
                                                    (allow mta_user_agent var_log_t (dir (getattr open search)))
                                                    (allow mta_user_agent var_log_t (lnk_file (read getattr)))
                                                    (allow mta_user_agent httpd_log_t (dir (ioctl read getattr lock open search)))
                                                    (allow mta_user_agent httpd_log_t (dir (getattr open search)))
                                                    (allow mta_user_agent httpd_log_t (file (ioctl getattr lock append open)))
                                                )
                                                (optional mta_optional_56
                                                    (typeattributeset cil_gen_require tmp_t)
                                                    (typeattributeset cil_gen_require arpwatch_tmp_t)
                                                    (typeattributeset cil_gen_require arpwatch_t)
                                                    (allow mta_user_agent tmp_t (dir (getattr open search)))
                                                    (allow mta_user_agent arpwatch_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                    (dontaudit mta_user_agent arpwatch_t (packet_socket (read write)))
                                                    (optional mta_optional_57
                                                        (typeattributeset cil_gen_require tmp_t)
                                                        (typeattributeset cil_gen_require system_cronjob_tmp_t)
                                                        (allow mta_user_agent tmp_t (dir (getattr open search)))
                                                        (allow mta_user_agent system_cronjob_tmp_t (file (ioctl read getattr lock open)))
                                                    )
                                                )
                                                (optional mta_optional_58
                                                    (typeattributeset cil_gen_require mon_t)
                                                    (dontaudit mta_user_agent mon_t (fd (use)))
                                                )
                                                (optional mta_optional_59
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_lib_t)
                                                    (typeattributeset cil_gen_require arpwatch_data_t)
                                                    (allow mailserver_delivery var_t (dir (getattr open search)))
                                                    (allow mailserver_delivery var_lib_t (dir (getattr open search)))
                                                    (allow mailserver_delivery arpwatch_data_t (dir (getattr open search)))
                                                )
                                                (optional mta_optional_60
                                                    (typeattributeset cil_gen_require bin_t)
                                                    (typeattributeset cil_gen_require usr_t)
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_spool_t)
                                                    (typeattributeset cil_gen_require dovecot_spool_t)
                                                    (typeattributeset cil_gen_require dovecot_deliver_t)
                                                    (typeattributeset cil_gen_require dovecot_deliver_exec_t)
                                                    (allow mailserver_delivery var_t (dir (getattr open search)))
                                                    (allow mailserver_delivery var_spool_t (dir (getattr open search)))
                                                    (allow mailserver_delivery dovecot_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                    (allow mailserver_delivery dovecot_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                    (allow mailserver_delivery dovecot_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                                    (allow mailserver_delivery bin_t (dir (getattr open search)))
                                                    (allow mailserver_delivery bin_t (lnk_file (read getattr)))
                                                    (allow mailserver_delivery usr_t (dir (getattr open search)))
                                                    (allow mailserver_delivery dovecot_deliver_exec_t (file (ioctl read getattr map execute open)))
                                                    (allow mailserver_delivery dovecot_deliver_t (process (transition)))
                                                    (dontaudit mailserver_delivery dovecot_deliver_t (process (noatsecure siginh rlimitinh)))
                                                    (typetransition mailserver_delivery dovecot_deliver_exec_t process dovecot_deliver_t)
                                                    (allow dovecot_deliver_t mailserver_delivery (fd (use)))
                                                    (allow dovecot_deliver_t mailserver_delivery (fifo_file (ioctl read write getattr lock append)))
                                                    (allow dovecot_deliver_t mailserver_delivery (process (sigchld)))
                                                )
                                                (optional mta_optional_61
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_lib_t)
                                                    (typeattributeset cil_gen_require mailman_mail_exec_t)
                                                    (typeattributeset cil_gen_require mailman_mail_t)
                                                    (typeattributeset cil_gen_require lib_t)
                                                    (typeattributeset cil_gen_require mailman_data_t)
                                                    (allow mailserver_delivery var_t (dir (getattr open search)))
                                                    (allow mailserver_delivery var_lib_t (dir (getattr open search)))
                                                    (allow mailserver_delivery lib_t (dir (getattr open search)))
                                                    (allow mailserver_delivery mailman_mail_exec_t (file (ioctl read getattr map execute open)))
                                                    (allow mailserver_delivery mailman_mail_t (process (transition)))
                                                    (dontaudit mailserver_delivery mailman_mail_t (process (noatsecure siginh rlimitinh)))
                                                    (typetransition mailserver_delivery mailman_mail_exec_t process mailman_mail_t)
                                                    (allow mailman_mail_t mailserver_delivery (fd (use)))
                                                    (allow mailman_mail_t mailserver_delivery (fifo_file (ioctl read write getattr lock append)))
                                                    (allow mailman_mail_t mailserver_delivery (process (sigchld)))
                                                    (allow mailserver_delivery mailman_data_t (dir (getattr open search)))
                                                    (allow mailserver_delivery mailman_data_t (lnk_file (read getattr)))
                                                )
                                                (optional mta_optional_62
                                                    (typeattributeset cil_gen_require mon_var_lib_t)
                                                    (dontaudit mailserver_delivery mon_var_lib_t (dir (search)))
                                                )
                                                (optional mta_optional_63
                                                    (typeattributeset cil_gen_require postfix_master_t)
                                                    (allow mailserver_delivery postfix_master_t (fd (use)))
                                                    (allow mailserver_delivery postfix_master_t (fifo_file (ioctl read write getattr lock append)))
                                                )
                                                (optional mta_optional_64
                                                    (typeattributeset cil_gen_require sympa_t)
                                                    (typeattributeset cil_gen_require sympa_exec_t)
                                                    (dontaudit mailserver_delivery sympa_t (tcp_socket (read write)))
                                                    (allow mailserver_delivery sympa_exec_t (file (ioctl read getattr map execute open)))
                                                    (allow mailserver_delivery sympa_t (process (transition)))
                                                    (dontaudit mailserver_delivery sympa_t (process (noatsecure siginh rlimitinh)))
                                                    (typetransition mailserver_delivery sympa_exec_t process sympa_t)
                                                )
                                                (optional mta_optional_65
                                                    (typeattributeset cil_gen_require bin_t)
                                                    (typeattributeset cil_gen_require usr_t)
                                                    (typeattributeset cil_gen_require uux_t)
                                                    (typeattributeset cil_gen_require uux_exec_t)
                                                    (allow mailserver_delivery bin_t (dir (getattr open search)))
                                                    (allow mailserver_delivery bin_t (lnk_file (read getattr)))
                                                    (allow mailserver_delivery usr_t (dir (getattr open search)))
                                                    (allow mailserver_delivery uux_exec_t (file (ioctl read getattr map execute open)))
                                                    (allow mailserver_delivery uux_t (process (transition)))
                                                    (dontaudit mailserver_delivery uux_t (process (noatsecure siginh rlimitinh)))
                                                    (typetransition mailserver_delivery uux_exec_t process uux_t)
                                                    (allow uux_t mailserver_delivery (fd (use)))
                                                    (allow uux_t mailserver_delivery (fifo_file (ioctl read write getattr lock append)))
                                                    (allow uux_t mailserver_delivery (process (sigchld)))
                                                )
                                                (optional mta_optional_66
                                                    (typeattributeset cil_gen_require tmp_t)
                                                    (typeattributeset cil_gen_require etc_t)
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_spool_t)
                                                    (typeattributeset cil_gen_require var_run_t)
                                                    (typeattributeset cil_gen_require postfix_etc_t)
                                                    (typeattributeset cil_gen_require postfix_spool_t)
                                                    (typeattributeset cil_gen_require user_tmp_t)
                                                    (typeattributeset cil_gen_require user_runtime_t)
                                                    (typeattributeset cil_gen_require user_runtime_root_t)
                                                    (allow user_mail_t self (capability (dac_override)))
                                                    (allow user_mail_t user_tmp_t (dir (ioctl read getattr lock open search)))
                                                    (allow user_mail_t user_tmp_t (dir (getattr open search)))
                                                    (allow user_mail_t user_tmp_t (file (ioctl read write getattr lock append open)))
                                                    (allow user_mail_t tmp_t (dir (getattr open search)))
                                                    (allow user_mail_t user_runtime_t (dir (getattr open search)))
                                                    (allow user_mail_t user_runtime_root_t (dir (getattr open search)))
                                                    (allow user_mail_t var_run_t (lnk_file (read getattr)))
                                                    (allow user_mail_t var_t (dir (getattr open search)))
                                                    (allow user_mail_t var_run_t (dir (getattr open search)))
                                                    (allow user_mail_t etc_t (dir (getattr open search)))
                                                    (allow user_mail_t postfix_etc_t (dir (ioctl read getattr lock open search)))
                                                    (allow user_mail_t postfix_etc_t (file (ioctl read getattr lock open)))
                                                    (allow user_mail_t postfix_etc_t (lnk_file (read getattr)))
                                                    (allow user_mail_t var_t (dir (getattr open search)))
                                                    (allow user_mail_t var_spool_t (dir (getattr open search)))
                                                    (allow user_mail_t postfix_spool_t (dir (ioctl read getattr lock open search)))
                                                )
                                                (optional mta_optional_67
                                                    (typeattributeset cil_gen_require at_job_log_t)
                                                    (allow system_mail_t at_job_log_t (file (ioctl read write getattr lock append)))
                                                )
                                                (optional mta_optional_68
                                                    (typeattributeset cil_gen_require tmp_t)
                                                    (typeattributeset cil_gen_require etc_t)
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require var_spool_t)
                                                    (typeattributeset cil_gen_require var_run_t)
                                                    (typeattributeset cil_gen_require postfix_etc_t)
                                                    (typeattributeset cil_gen_require postfix_spool_t)
                                                    (typeattributeset cil_gen_require user_tmp_t)
                                                    (typeattributeset cil_gen_require user_runtime_t)
                                                    (typeattributeset cil_gen_require user_runtime_root_t)
                                                    (allow admin_mail_t self (capability (dac_override)))
                                                    (allow admin_mail_t user_tmp_t (dir (ioctl read getattr lock open search)))
                                                    (allow admin_mail_t user_tmp_t (dir (getattr open search)))
                                                    (allow admin_mail_t user_tmp_t (file (ioctl read write getattr lock append open)))
                                                    (allow admin_mail_t tmp_t (dir (getattr open search)))
                                                    (allow admin_mail_t user_runtime_t (dir (getattr open search)))
                                                    (allow admin_mail_t user_runtime_root_t (dir (getattr open search)))
                                                    (allow admin_mail_t var_run_t (lnk_file (read getattr)))
                                                    (allow admin_mail_t var_t (dir (getattr open search)))
                                                    (allow admin_mail_t var_run_t (dir (getattr open search)))
                                                    (allow admin_mail_t etc_t (dir (getattr open search)))
                                                    (allow admin_mail_t postfix_etc_t (dir (ioctl read getattr lock open search)))
                                                    (allow admin_mail_t postfix_etc_t (file (ioctl read getattr lock open)))
                                                    (allow admin_mail_t postfix_etc_t (lnk_file (read getattr)))
                                                    (allow admin_mail_t var_t (dir (getattr open search)))
                                                    (allow admin_mail_t var_spool_t (dir (getattr open search)))
                                                    (allow admin_mail_t postfix_spool_t (dir (ioctl read getattr lock open search)))
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(filecon "HOME_DIR/\.esmtp_queue" file (system_u object_r mail_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.forward[^/]*" file (system_u object_r mail_home_t (systemlow systemlow)))
(filecon "HOME_DIR/dead\.letter" file (system_u object_r mail_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.mailrc" file (system_u object_r mail_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.msmtprc" file (system_u object_r mail_home_t (systemlow systemlow)))
(filecon "HOME_DIR/Maildir(/.*)?" any (system_u object_r mail_home_rw_t (systemlow systemlow)))
(filecon "HOME_DIR/DovecotMail(/.*)?" any (system_u object_r mail_home_rw_t (systemlow systemlow)))
(filecon "HOME_DIR/\.maildir(/.*)?" any (system_u object_r mail_home_rw_t (systemlow systemlow)))
(filecon "/etc/aliases" file (system_u object_r etc_aliases_t (systemlow systemlow)))
(filecon "/etc/aliases\.db" file (system_u object_r etc_aliases_t (systemlow systemlow)))
(filecon "/etc/mail(/.*)?" any (system_u object_r etc_mail_t (systemlow systemlow)))
(filecon "/etc/mail/aliases.*" file (system_u object_r etc_aliases_t (systemlow systemlow)))
(filecon "/etc/msmtprc" file (system_u object_r etc_mail_t (systemlow systemlow)))
(filecon "/etc/postfix/aliases.*" file (system_u object_r etc_aliases_t (systemlow systemlow)))
(filecon "/usr/bin/esmtp" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/mail(x)?" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/msmtp" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/rmail" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/sendmail\.postfix" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/sendmail(\.sendmail)?" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/bin/ssmtp" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/lib/sendmail" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/lib/courier/bin/sendmail" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/rmail" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/sendmail\.postfix" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/sendmail(\.sendmail)?" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/ssmtp" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/var/mail(/.*)?" any (system_u object_r mail_spool_t (systemlow systemlow)))
(filecon "/var/qmail/bin/sendmail" file (system_u object_r sendmail_exec_t (systemlow systemlow)))
(filecon "/var/spool/imap(/.*)?" any (system_u object_r mail_spool_t (systemlow systemlow)))
(filecon "/var/spool/(client)?mqueue(/.*)?" any (system_u object_r mqueue_spool_t (systemlow systemlow)))
(filecon "/var/spool/mqueue\.in(/.*)?" any (system_u object_r mqueue_spool_t (systemlow systemlow)))
(filecon "/var/spool/mail(/.*)?" any (system_u object_r mail_spool_t (systemlow systemlow)))
(filecon "/var/spool/nullmailer(/.*)?" any (system_u object_r mail_spool_t (systemlow systemlow)))
(filecon "/var/spool/nullmailer/queue(/.*)?" any (system_u object_r mqueue_spool_t (systemlow systemlow)))
