Created attachment 833305 [details]
Audit messages without the custom module

Description of problem:
I needed to generate a custom module to successfully use cobbler on rhel 6.4 with SELinux in enforcing mode. The module is:


module cobbler_local 1.0;

require {
        type httpd_sys_content_t;
        type etc_t;
        type cobblerd_t;
        class lnk_file { read getattr };
        class file write;
        class dir read;
}

#============= cobblerd_t ==============
allow cobblerd_t etc_t:file write;
allow cobblerd_t httpd_sys_content_t:dir read;
allow cobblerd_t httpd_sys_content_t:lnk_file { read getattr };



Version-Release number of selected component (if applicable):
# rpm -qa | grep selinux
ipa-server-selinux-3.0.0-26.el6_4.4.x86_64
libselinux-python-2.0.94-5.3.el6_4.1.x86_64
libselinux-2.0.94-5.3.el6_4.1.x86_64
selinux-policy-targeted-3.7.19-195.el6_4.18.noarch
libselinux-ruby-2.0.94-5.3.el6_4.1.x86_64
libselinux-utils-2.0.94-5.3.el6_4.1.x86_64
selinux-policy-3.7.19-195.el6_4.18.noarch
pki-selinux-9.0.3-30.el6.noarch

# rpm -qa | grep cobbler
cobbler-2.4.0-1.el6.noarch


I'll attach the audit messages.