Upstream sendmail has aliases in /etc/mail/aliases(.db)? rather than /etc/aliases(.db)? I therefore suggest adding the following contexts to policy for the benefit those of us rolling our own sendmail packages: /etc/mail/aliases -- gen_context(system_u:object_r:etc_aliases_t,s0) /etc/mail/aliases\.db -- gen_context(system_u:object_r:etc_aliases_t,s0) Paul,