diff --git a/policy/modules/contrib/mta.if b/policy/modules/contrib/mta.if
index 80738621b3..9cecbef637 100644
--- a/policy/modules/contrib/mta.if
+++ b/policy/modules/contrib/mta.if
@@ -524,6 +524,25 @@ interface(`mta_read_config',`
read_lnk_files_pattern($1, etc_mail_t, etc_mail_t)
')
+########################################
+##
+## Mmap mail server configuration.
+##
+##
+##
+## Domain allowed access.
+##
+##
+##
+#
+interface(`mta_map_config',`
+ gen_require(`
+ type etc_mail_t;
+ ')
+
+ allow $1 etc_mail_t:file map;
+')
+
########################################
##
## write mail server configuration.
diff --git a/policy/modules/contrib/sendmail.te b/policy/modules/contrib/sendmail.te
index d3b70e081b..16c69a69d6 100644
--- a/policy/modules/contrib/sendmail.te
+++ b/policy/modules/contrib/sendmail.te
@@ -126,6 +126,7 @@ userdom_read_user_home_content_files(sendmail_t)
userdom_dontaudit_list_user_home_dirs(sendmail_t)
mta_read_config(sendmail_t)
+mta_map_config(sendmail_t)
mta_etc_filetrans_aliases(sendmail_t)
# Write to /etc/aliases and /etc/mail.
mta_map_aliases(sendmail_t)