CentOS 6.5, selinux-policy-targeted 3.7.19-231. We have many years of /var/spool/indexes/<user>/... They're currently all dovecot_t. grep imap /var/log/audit/audit.log | audit2allow tells me "The source type 'dovecot_t' can write to a 'dir' of the following types: # dovecot_tmp_t, user_home_t, dovecot_spool_t, mail_home_rw_t, dovecot_var_log_t, dovecot_var_run_t, mail_spool_t, cluster_conf_t, nfs_t So, is this trying to tell me that I need to relabel *everything* down there as something else - dovecot_spool_t, or what? mark -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux