Comment # 4 on bug 1070133 from Christian Boltz

(In reply to Joe Morris from comment #3)
> Just FYI, the new kernel (4.14.2) allowed apparmor to be trained for a few
> dovecot files permissions, 

I assume you know that you can configure your mail storage path in
/etc/apparmor/tunables/dovecot to adjust all dovecot profiles at once, right?
;-)

If you needed to add more permissions and they are not completely specific to
your setup, please open a bugreport so that I can add them to the official
profiles.