policy_module(dovecot_additional, 0.0.4) require { type dovecot_deliver_exec_t; type dovecot_deliver_t; type dovecot_t; type mail_spool_t; } mta_manage_spool(dovecot_deliver_t) allow dovecot_t mail_spool_t:file map; allow dovecot_deliver_t mail_spool_t:file map;