Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able...

diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te
index 06be6b177d36a9532352c5bd7ed6d806a6536585..701607cd17ac75c2fd51f9d561b683b7d4ddf6dc 100644 (file)
--- a/policy/modules/services/postfix.te
+++ b/policy/modules/services/postfix.te
@@ -581,8 +581,7 @@ allow postfix_qmgr_t postfix_spool_bounce_t:dir list_dir_perms;
 allow postfix_qmgr_t postfix_spool_bounce_t:file read_file_perms;
 allow postfix_qmgr_t postfix_spool_bounce_t:lnk_file read_lnk_file_perms;
 
-allow postfix_qmgr_t postfix_spool_maildrop_t:dir list_dir_perms;
-allow postfix_qmgr_t postfix_spool_maildrop_t:file read_file_perms;
+manage_files_pattern(postfix_qmgr_t, postfix_spool_maildrop_t, postfix_spool_maildrop_t)
 allow postfix_qmgr_t postfix_spool_maildrop_t:lnk_file read_lnk_file_perms;
 
 corecmd_exec_bin(postfix_qmgr_t)