If you install nss-mdns and add mdns to the resolver list, you can't then run ping to ping based on the mdns names avc: denied { search } for comm=ping dev=dm-0 name=avahi-daemon pid=26259 scontext=system_u:system_r:ping_t:s0 tclass=dir tcontext=system_u:object_r:avahi_var_run_t:s0
This should be allowed by current policy Fixed in selinux-policy-3.1.1-1.fc9
Bulk closing all bugs in Fedora updates in the modified state. If you bug is not fixed, please reopen.