[нуб] centos 5.5 selinux deliver dovecot

semanage fcontext -a -t dovecot_spool_t "/mnt/mail/vmail(/.*)?"
restorecon -Rv /mnt/mail/vmail

cat << EOF
module dovecotdeliverlocal 1.0;
require {
        type devpts_t;
        type dovecot_t;
        type dovecot_spool_t;
        type dovecot_deliver_t;
        class file { rename setattr read lock create write getattr link unlink };
        class dir { write search remove_name create getattr add_name };
        class chr_file { read write };
}
allow dovecot_deliver_t devpts_t:chr_file { read write };
allow dovecot_deliver_t dovecot_spool_t:dir { write search remove_name create getattr add_name };
allow dovecot_deliver_t dovecot_spool_t:file { rename setattr read lock create write getattr link unlink };
EOF > dovecotdeliverlocal.te
checkmodule -M -m -o dovecotdeliverlocal.mod dovecotdeliverlocal.te
semodule_package -o dovecotdeliverlocal.pp -m dovecotdeliverlocal.mod
semodule -i dovecotdeliverlocal.pp