Description of problem:
The setroubleshoot browser states "SELinux has denied ntpd access to 
potentially mislabeled file(s) (/home/u/.xsession-errors)".  But
the file label seems plausible to me, so I wonder if this is really a
policy error, or must we re-engineer how ntpd communicates with the
user?

  More interestingly, if one changes SELinux to run in permissive mode,
(via System, Administration, SELinux management, in Status pane change 
"Current Enforcing Mode" from "Enforcing" to "Permissive"), the lines
that are written to ~/.xsession-errors are:

** (gnome-panel:3259): WARNING **: panel-applet-frame.c:1285: failed to load
applet OAFIID:TomboyApplet:
(null)

even though Tomboy is not currently (and never has been) in use, but
I gather it is now a standard part of the mono-infection of gnome-applets.
This behavior and content was quite repeatable with
gnome-applets-2.22.1-2.fc9.i386.  After the update to
gnome-applets-2.22.2-1.fc9.i386 the AVC denial is still just as repeatable,
but even when running in SELinux permissive mode, no new lines are 
written to ~/.xsession-errors. ??

Version-Release number of selected component (if applicable):
gnome-applets-2.22.1-2.fc9.i386 [first observed with]
gnome-applets-2.22.2-1.fc9.i386 [still happens with]
selinux-policy-3.3.1-55.fc9.noarch [first observed with]
selinux-policy-3.3.1-62.fc9.noarch [still happens with]

How reproducible:
  Once is enough for bugs of this sort, but I have seen it repeatedly.

Steps to Reproduce:
1.  Enable ntp on a system where it was most recently disabled via
    System, Administration, Date & Time, authenticate as root,
    Network Time Protocol tab, [select checkbox] Enable Network Time Protocol

Actual results:
Top panel popup appears stating "SELinux AVC denial, click to view".
The time displayed in the top panel clock is updated appropriately
by ntpd (if needed), without triggering any further denials. 

Expected results:
Safely record the information in ~/.xsession-errors
  OR
don't try to write unrelated gibberish in ~/.xsession-errors

Additional info:

Source Context: unconfined_u:system_r:ntpd_t:s0
Target Context: system_u:object_r:user_home_t:s0
Target Objects: /home/u/.xsession-errors [ file ]
Source: ntpd
Source Path: /usr/sbin/ntpd
Port: <Unknown>
Host: localhost.localdomain
Source RPM Packages: ntp-4.2.4p4-6.fc9
Target RPM Packages:
Policy RPM: selinux-policy-3.3.1-55.fc9
Selinux Enabled: True
Policy Type: targeted
MLS Enabled: True
Enforcing Mode: Enforcing

Nitpick:  I have yet to see an instance of this error message where
the presence of the word "the" in front of the program name does not
seem to be a stumbling block (as perceived in a American dialect of
English).  Should this extra word be removed? 
 SELinux is preventing the ntpd from ...
 . . . . . . . . . . . --- . . . . . ...