test if spamd can search the /var/lib/snapd directory
A recently filed BZ report revealed that SELinux prevents the spamd
processes from searching (syscall = newfstatat) the /var/lib/snapd
directory when the snapd package is installed. The TC reproduces
the situation.
Because the spamassassin service logs indicate that the spamd functions
are not affected by the denied access, I believe that SELinux policy
should dontaudit the action. The TC looks for appropriate policy rules
and file context patterns.
The TC covers BZ#2207725.