Description of problem: SELinux is preventing /usr/bin/updatedb (locate_t) "read" to / (fusefs_t). Version-Release number of selected component (if applicable): Affected RPM Packages: mlocate-0.16-1 [application]filesystem-2.4.6-1.fc7 [target] Policy RPM: selinux-policy-2.6.4-6.fc7 Actual results: avc report as attached Expected results: no avc report Additional info: Related to #234827, #235942, #239722. Source Context: system_u:system_r:locate_t Target Context: system_u:object_r:fusefs_tTarget Objects: / [ dir ] avc: denied { read } for comm="updatedb" dev=sda5 egid=0 euid=0 exe="/usr/bin/ updatedb" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="/" pid=10846 scontext=system_u:system_r:locate_t:s0 sgid=0 subj=system_u:system_r:locate_t:s0 suid=0 tclass=dir tcontext=system_u:object_r:fusefs_t:s0 tty=(none) uid=0
Fixed in selinux-policy-2.6.4-9.fc7
Moving modified bugs to closed