From Debian package 0.0.20080702-6
0077-courier-policy-adjustments-Label-courier-socket-file.patch (part of)

Allow courier_pop_t to connect to courier_authdaemon_t sockets
Adds to 321_courier_debian_fixes

Index: policy/modules/contrib/courier.te
===================================================================
--- policy/modules/contrib/courier.te.orig
+++ policy/modules/contrib/courier.te
@@ -90,7 +90,7 @@
 #
 
 allow courier_pop_t self:capability { setgid setuid };
-allow courier_pop_t courier_authdaemon_t:{ unix_stream_socket tcp_socket } rw_stream_socket_perms;
+allow courier_pop_t courier_authdaemon_t:{ unix_stream_socket tcp_socket } { connectto rw_stream_socket_perms };
 allow courier_pop_t courier_authdaemon_t:process sigchld;
 
 allow courier_pop_t courier_tcpd_t:{ unix_stream_socket tcp_socket } rw_stream_socket_perms;