allow map postfix_master_t

allow-map-postfix_master_t.patch

@@ -0,0 +1,24 @@
+From 88bba24aac779da470bcf30dcb851d64a2352e9b Mon Sep 17 00:00:00 2001
+From: xwx1057739 <xinghe2@h-partners.com>
+Date: Mon, 19 Sep 2022 15:37:00 +0800
+Subject: [PATCH] allow map postfix_master_t
+
+---
+ policy/modules/contrib/postfix.te | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/policy/modules/contrib/postfix.te b/policy/modules/contrib/postfix.te
+index 257b589..b160137 100644
+--- a/policy/modules/contrib/postfix.te
++++ b/policy/modules/contrib/postfix.te
+@@ -854,3 +854,7 @@ optional_policy(`
+ optional_policy(`
+ 	udev_read_db(postfix_domain)
+ ')
++
++optional_policy(`
++    mta_map_aliases(postfix_master_t)
++')
+-- 
+2.33.0
+

selinux-policy.spec

@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 35.5
-Release: 12
+Release: 13
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -179,6 +179,7 @@ Patch9000: add-qemu_exec_t-for-stratovirt.patch
 Patch9001: fix-context-of-usr-bin-rpmdb.patch
 Patch9002: Add-permission-open-to-files_read_inherited_tmp_file.patch
 Patch9003: allow-httpd-to-put-files-in-httpd-config-dir.patch
+Patch9004: allow-map-postfix_master_t.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -844,6 +845,9 @@ exit 0
 %endif
 
 %changelog
+* Mon Sep 19 2022 xinghe <xinghe2@h-partners.com> - 35.5-13
+- allow map postfix_master_t
+
 * Thu Sep 15 2022 lujie <lujie54@huawei.com> - 35.5-12
 - backport upstream patches