Description of problem:
I was "playing" with the dnssec-trigger icon in the icon-tray.
SELinux is preventing /usr/sbin/unbound-control from 'open' accesses on the file .

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that unbound-control should be allowed open access on the  file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep unbound-control /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:dnssec_trigger_t:s0
Target Context                system_u:object_r:named_exec_t:s0
Target Objects                 [ file ]
Source                        unbound-control
Source Path                   /usr/sbin/unbound-control
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           unbound-1.4.22-5.fc20.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.12.1-183.fc20.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.16.3-200.fc20.x86_64 #1 SMP Wed
                              Sep 17 22:34:21 UTC 2014 x86_64 x86_64
Alert Count                   4
First Seen                    2014-10-01 10:54:04 CEST
Last Seen                     2014-10-14 11:42:22 CEST
Local ID                      eed1bc9f-a913-47af-be0e-bebc32b0f7ac

Raw Audit Messages
type=AVC msg=audit(1413279742.760:83807): avc:  denied  { open } for  pid=38639 comm="sh" path="/usr/sbin/unbound-control" dev="dm-0" ino=9443436 scontext=system_u:system_r:dnssec_trigger_t:s0 tcontext=system_u:object_r:named_exec_t:s0 tclass=file permissive=1


type=AVC msg=audit(1413279742.760:83807): avc:  denied  { execute_no_trans } for  pid=38639 comm="sh" path="/usr/sbin/unbound-control" dev="dm-0" ino=9443436 scontext=system_u:system_r:dnssec_trigger_t:s0 tcontext=system_u:object_r:named_exec_t:s0 tclass=file permissive=1


type=SYSCALL msg=audit(1413279742.760:83807): arch=x86_64 syscall=execve success=yes exit=0 a0=14e5d10 a1=14e5fe0 a2=14e4bb0 a3=8 items=0 ppid=1958 pid=38639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=unbound-control exe=/usr/sbin/unbound-control subj=system_u:system_r:dnssec_trigger_t:s0 key=(null)

Hash: unbound-control,dnssec_trigger_t,named_exec_t,file,open

Additional info:
reporter:       libreport-2.2.3
hashmarkername: setroubleshoot
kernel:         3.16.3-200.fc20.x86_64
type:           libreport