policy_module(postfix_additional, 0.0.3) require { type postfix_master_t; type porticron_t; type postfix_postdrop_t; type dovecot_deliver_t; } allow postfix_postdrop_t porticron_t:unix_stream_socket { getattr read write }; allow postfix_postdrop_t dovecot_deliver_t:unix_stream_socket { getattr read write }; corenet_tcp_bind_all_unreserved_ports(postfix_master_t)