Some OMNIKEY (CardMan 2020, CardMan 4000) and SCM Microsystems (SCR24x) smart card reader drivers include a non-PIC binary-only pcsc-lite driver module, which doesn't work with selinux-policy-targeted out of the box; audit.log says execmod denied for pcscd when it tries to load these. Setting this: /usr(/.*)?/pcsc/drivers(/.*)?/libcm(2020|4000|SCR24x)\.so(\.[^/]*)* ...to system_u:object_r:textrel_shlib_t would fix it AFAICT.
Thanks, I see this has been applied in recent selinux policy packages. However, my regexp above and the one in the policy is buggy, it should be: .../lib(cm2020|cm4000|SCR24x)\.so... ie. one of the libs is libSCR24x.so, not libcmSCR24x.so. Sorry about that.
Fixed in 2.1.6-17
Thanks.