policy_module(roundcube,1.3.8)

require {
type chkpwd_t;
type etc_t;
type shadow_t;
type dovecot_auth_t;
type dovecot_t;
type httpd_t;
type mail_home_rw_t;
type var_lib_t;
}


#============= chkpwd_t ==============
allow chkpwd_t etc_t:file map;
allow chkpwd_t shadow_t:file map;

#============= dovecot_auth_t ==============
allow dovecot_auth_t etc_t:file map;
#============= dovecot_t ==============
allow dovecot_t etc_t:file map;
allow dovecot_t mail_home_rw_t:file map;

#============= httpd_t ==============
allow httpd_t etc_t:file map;
allow httpd_t var_lib_t:file write;