I read that HOWTO, actually, and the stuff you're describing isn't really explained in it.

For example, there's a httpd example changing a label right there in the HOWTO, and it doesn't explain where I'm supposed to discover the correct label. And the recommended audit-script-to-config doesn't show the correct labels, it prompts you to relax the rule instead of changing labels.

My procmail rules don't correspond to what you said procmail does. And how was I supposed to discover procmail_home_t ?

I'm not saying I'm Mr. Super Smart, I'm just saying that it's quite a bit of investment.