Created attachment 1423383 [details] all log Description of problem: After redhat-virtualization-host-4.1-20180417.0 installed, there are AVC denied errors (rsyslog) in audit.log. Version-Release number of selected component (if applicable): redhat-virtualization-host-4.1-20180417.0 imgbased-0.9.58-0.1.el7ev.noarch selinux-policy-3.13.1-192.el7_5.3.noarch How reproducible: 50% Steps to Reproduce: 1. Install redhat-virtualization-host-4.1-20180417.0 via PXE, selinux in enforcing mode as default. 2. Login to RHVH. # grep "avc: denied" /var/log/audit/audit.log type=AVC msg=audit(1524021641.012:114): avc: denied { write } for pid=2254 comm="in:imjournal" name="rsyslog" dev="dm-8" ino=393258 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir Actual results: AVC denied error msgs in audit.log Expected results: No avc denied errors in audit.log.
Test this bug several times with the latest iso(RHVH-4.1-20180418.0-RHVH-x86_64-dvd1.iso), can't reproduce it any more, so close this bug.