Description of problem:

Here's the output of audit2allow:

allow passenger_t ifconfig_exec_t:file { read getattr open execute execute_no_trans };
allow passenger_t proc_net_t:file { read getattr open };
allow passenger_t puppet_etc_t:file { execute execute_no_trans };
allow passenger_t puppet_log_t:file { write relabelfrom relabelto };
allow passenger_t puppet_var_lib_t:dir { relabelfrom relabelto create rmdir setattr };
allow passenger_t puppet_var_lib_t:file { relabelfrom relabelto };

How reproducible:
This issue can always be reproduced when running the master under Passenger when enforcing.

Expected results:
The master will start without AVC denials.


Additional info: