Sometimes, you'll run into a problem that you can't fix by either changing the type or by setting a Boolean. In times like these, you'll need to create a custom policy module, and you'll use the audit2allow utility to do that.
Here's a screenshot of a problem I had several years ago, when I was helping a client set up a Postfix mail server on CentOS 7:
So, for some strange reason that I never understood, SELinux wouldn't allow Dovecot, the Mail Delivery Agent component of the mail server, to read its own dict file. There's no Boolean to change and there wasn't a type problem, so setroubleshoot suggested that ...
