Description of problem:
Have been merrily running sendmail/dovecot on server that was f17.  Been a long time since I got that working.  It was even more fun this time :/

See the issues again where any delivery attempt made with dovecot-lda as the delivery agent fails because the /var/log/dovecot*.log files cannot be written

Version-Release number of selected component (if applicable):
dovecot-2.2.7-2.fc19.x86_64
sendmail-8.14.7-1.fc19.x86_64
selinux-policy-targeted-3.12.1-74.11.fc19.noarch


How reproducible:
100%

Steps to Reproduce:
1. attempt to setup sendmail/dovecot combo
2.
3.

Actual results:
sendmail[9841]: rAI44Djm009073: to=me, delay=00:11:16, xdelay=00:00:00, mailer=local, pri=212311, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/dovecot-lda) exited with EX_TEMPFAIL

Matching with the above, as I worked my way though each recommended action:
setroubleshoot: SELinux is preventing /usr/libexec/dovecot/dovecot-lda from write access on the directory /var/log.
setroubleshoot: SELinux is preventing /usr/libexec/dovecot/dovecot-lda from add_name access on the directory dovecot-lda-errors.log.
setroubleshoot: SELinux is preventing /usr/libexec/dovecot/dovecot-lda from using the setgid capability.
setroubleshoot: SELinux is preventing /usr/libexec/dovecot/dovecot-lda from using the setuid capability.

Expected results:
mail is delivered.

Additional info:
This seems to have put a band-aid on it:

diff --git a/policy/dovecot-lda.te b/policy/dovecot-lda.te
new file mode 100644
index 0000000..92c6855
--- /dev/null
+++ b/policy/dovecot-lda.te
@@ -0,0 +1,14 @@
+
+module dovecot-lda 1.1;
+
+require {
+       type var_log_t;
+       type dovecot_deliver_t;
+       class capability setgid;
+       class capability setuid;
+       class dir { write add_name };
+}
+
+#============= dovecot_deliver_t ==============
+allow dovecot_deliver_t self:capability { setgid setuid };
+allow dovecot_deliver_t var_log_t:dir { write add_name };