This is f31 fully updated

The package pyzor, used for checking mails to avoid spam, wants to access /proc/net when used from procmail:

# grep spamc /etc/procmailrc 
| /usr/bin/spamc -u $USER -d 127.0.0.1 -p 783

spamassassin is configured to uses pyzor:
# grep pyzor /etc/mail/spamassassin/local.cf 
use_pyzor 1
pyzor_timeout 20

# grep Pyzor /etc/mail/spamassassin/v310.pre 
loadplugin Mail::SpamAssassin::Plugin::Pyzor

but then each time a mail is checked there is this avc:
# ausearch -m avc -su spamc_t -ts 07/04/2020 |tail -1
type=AVC msg=audit(1586353691.120:6538): avc:  denied  { read } for  pid=343477 comm="pyzor" name="unix" dev="proc" ino=4026532056 scontext=system_u:system_r:spamc_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=0

# ll -i /proc/net/unix 
4026532056 -r--r--r--. 1 root root 0 11 avril 11:52 /proc/net/unix

this custom module stops those avc, but maybe a don't audit rules is better?

# cat selinux/localSpam.te

require {
	type proc_net_t;
	type spamc_t;
	class file read;
}

#============= spamc_t ==============
allow spamc_t proc_net_t:file read;

regards
Laurent Jacquot