#============= postfix_local_t ==============
allow postfix_local_t httpd_sys_content_t:dir { search getattr };
allow postfix_local_t httpd_sys_content_t:file { ioctl execute append read getattr execute_no_trans };
allow postfix_local_t httpd_sys_content_t:lnk_file { read getattr };
allow postfix_local_t usr_t:file read;