Introduce postfix_user_sendmail_privs
Make postfix_t launchable from init
Initial policy
postfix_local_t is delivery agent
Mark sysadm as a mail_role capable userdomain
Move mta away, prepare for wrapper
system_sendmail_t is appdomain