Description of problem:
auditctl is running with auditctl_t context and therefore its output can't be redirected to a file. The latest audit package introduced a feature that auditctl -l list the rules in form that can be loaded again, but this would be interesting if the output could be at sent to a file.

Version-Release number of selected component (if applicable):
audit-2.3.7-5.el6
selinux-policy-3.7.19-231.el6

How reproducible:
always

Steps to Reproduce:
# auditctl -w /bin/date -p x -k watch-date
# auditctl -l
-w /bin/date -p x -k watch-date
# cat /root/a
# cat /tmp/a
# ausearch -m avc -ts recent
----
time->Mon Aug 11 17:28:47 2014
type=PATH msg=audit(1407770927.466:337): item=1 name=(null) inode=3393 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL
type=PATH msg=audit(1407770927.466:337): item=0 name="/sbin/auditctl" inode=74764 dev=fd:00 mode=0100750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:auditctl_exec_t:s0 nametype=NORMAL
type=CWD msg=audit(1407770927.466:337):  cwd="/root"
type=EXECVE msg=audit(1407770927.466:337): argc=2 a0="auditctl" a1="-l"
type=SYSCALL msg=audit(1407770927.466:337): arch=c000003e syscall=59 success=yes exit=0 a0=2022350 a1=2023de0 a2=1fd7c00 a3=7fffbda49e30 items=2 ppid=6794 pid=18424 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 ses=3 comm="auditctl" exe="/sbin/auditctl" subj=unconfined_u:unconfined_r:auditctl_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1407770927.466:337): avc:  denied  { write } for  pid=18424 comm="auditctl" path="/root/a" dev=dm-0 ino=74624 scontext=unconfined_u:unconfined_r:auditctl_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file
#
#
# setenforce 0
# auditctl -l >/tmp/a
# cat /tmp/a
-w /bin/date -p x -k watch-date
#

Actual results:
auditctl -l can not be redirected to a file

Expected results:
At least writing to /tmp dir would be desirable.