Description of problem: When restorecon is run as a cron job it produces: SELinux is preventing /sbin/setfiles (setfiles_t) "write" to pipe (crond_t). I'm guessing this is restorecon trying to write output which should end up being emailed by crond? Version-Release number of selected component (if applicable): selinux-policy-targeted-3.0.8-74.fc8 How reproducible: Every night. Steps to Reproduce: 1. Create the cronjob: 04 4 * * * /sbin/restorecon -e /home/long/mnt -R -v /home/long/pc 2. 3. Actual results: Every day I find this message from setroubleshoot: SELinux is preventing /sbin/setfiles (setfiles_t) "write" to pipe (crond_t). Expected results: No messages from setroubleshoot Additional info:
# audit2allow -M mypol -i /var/log/audit/audit.log # semodule -i mypol.pp Fixed in selinux-policy-3.0.8-79.fc8
I think this is also leading to another selinux denial: SELinux is preventing /usr/sbin/crond (setfiles_t) "sigchld" to (crond_t). Happens at the same time as the other error message.
Fixed in selinux-policy-3.0.8-84.fc8
Bugs have been in modified for over one month. Closing as fixed in current release please reopen if the problem still persists.