I came to the same conclusion, but in my case the problem was that there were no audit messages for one particular denial. After a week or two of investigation

I came to the same conclusion, but in my case the problem was that there were no audit messages for one particular denial. After a week or two of investigation I finally found the solution. But, I decided that I simply couldn't trust selinux any more, so I turned it off.