From Debian package 0.0.20080702-6 Allow courier_pop_t to connect to courier_authdaemon_t sockets Index: policy/modules/services/courier.te =================================================================== --- policy/modules/services/courier.te.orig +++ policy/modules/services/courier.te @@ -90,7 +90,7 @@ # allow courier_pop_t self:capability { setgid setuid }; -allow courier_pop_t courier_authdaemon_t:{ unix_stream_socket tcp_socket } rw_stream_socket_perms; +allow courier_pop_t courier_authdaemon_t:{ unix_stream_socket tcp_socket } { connectto rw_stream_socket_perms }; allow courier_pop_t courier_authdaemon_t:process sigchld; allow courier_pop_t courier_tcpd_t:{ unix_stream_socket tcp_socket } rw_stream_socket_perms;