dovecot selinux

ssfn-dovecot.te

policy_module(ssfn-dovecot, 1.2)

require{
 type dovecot_auth_t;
 type dovecot_t;
 type dovecot_var_run_t;
 type proc_security_t;
 type init_t;
 class fifo_file { open write };
 class file { getattr };
 class tcp_socket { getattr accept read write };
 class unix_stream_socket { read write };
 class capability2 block_suspend;
 class process { noatsecure rlimitinh siginh };
}

allow dovecot_auth_t dovecot_var_run_t:fifo_file { open write };

allow dovecot_auth_t dovecot_t:tcp_socket { getattr accept read write };
allow dovecot_auth_t init_t:unix_stream_socket { read write };
allow dovecot_auth_t self:capability2 block_suspend;

allow dovecot_t proc_security_t:file getattr;
allow dovecot_t dovecot_auth_t:process { noatsecure rlimitinh siginh };
allow dovecot_t self:capability2 block_suspend;