## Dovecot POP and IMAP mail server
########################################
##
## Create, read, write, and delete the dovecot spool files.
##
##
##
## Domain allowed access.
##
##
#
interface(`dovecot_manage_spool',`
gen_require(`
type dovecot_spool_t;
')
manage_files_pattern($1, dovecot_spool_t, dovecot_spool_t)
manage_lnk_files_pattern($1, dovecot_spool_t, dovecot_spool_t)
')
########################################
##
## Do not audit attempts to delete dovecot lib files.
##
##
##
## Domain to not audit.
##
##
#
interface(`dovecot_dontaudit_unlink_lib_files',`
gen_require(`
type dovecot_var_lib_t;
')
dontaudit $1 dovecot_var_lib_t:file unlink;
')