All,

The system is FC5. Several packages, logroate, makewhatis, yum, updatedb, etc. appear to have problems with policy. Below is an example. What is the issue? Thanks - Dan

ls -Z /usr/sbin/logrotate
-rwxr-xr-x root root system_ubject_r:logrotate_exec_t /usr/sbin/logrotate

ls -Z /var/lib/logrotate.status
-rw-r--r-- root root system_ubject_r:file_t /var/lib/logrotate.status

audit(1157972563.535:1748): avc: denied { write } for pid=8676 comm="logrotate" name="logrotate.status" dev=sda2 ino=803406 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=file

Run through audit2allow?

Great - thanks.

All the errors related to hotplug. Why or how would hotplug/udev not be in the policy set?

Thanks - Dan

All the errors related to hotplug. Why or how would hotplug/udev not be in the policy set?
I think hotplug/udev would be, but the policy may not expect those packages to run in that context.