A complete audit2allow: root at uvinct178:~# dmesg | audit2allow #============= system_mail_t ============== allow system_mail_t var_spool_t:dir write; #============= user_mail_t ============== allow user_mail_t initrc_t:unix_stream_socket connectto; allow user_mail_t var_spool_t:sock_file write; Regards -- Mathieu Parent