Description of problem: /sbin/ausearch -sv no -m AVC -m USER_AVC -m SELINUX_ERR -ts 6/23/2009 0:25:31 ---- time->Tue Jun 23 00:26:37 2009 type=SYSCALL msg=audit(1245731197.643:35): arch=c000003e syscall=2 success=no exit=-13 a0=ba8d940 a1=241 a2=1b6 a3=2ad8c85538f0 items=0 ppid=12721 pid=12724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="perl" exe="/usr/bin/perl" subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1245731197.643:35): avc: denied { write } for pid=12724 comm="perl" name="services" dev=dm-0 ino=40699022 scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=dir Version-Release number of selected component (if applicable): selinux-policy 2.4.6 248.el5 noarch How reproducible: Not 100%. It happens at apparently random places within our tests. See rhts jobs 67886, 67883 and 67872 for examples.
This is not an SELinux bug but a long standing error with logwatch and some other tools.
*** This bug has been marked as a duplicate of bug 503084 ***