Summary:

SELinux is preventing /usr/sbin/xenstored "search" access on /proc/xen.

Detailed Description:

SELinux denied access requested by xenstored. It is not expected that this
access is required by xenstored and this access may signal an intrusion attempt.
It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                unconfined_u:system_r:xenstored_t:s0
Target Context                system_u:object_r:xenfs_t:s0
Target Objects                /proc/xen [ dir ]
Source                        xenstored
Source Path                   /usr/sbin/xenstored
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           xen-runtime-3.4.1-5.fc12
Target RPM Packages           
Policy RPM                    selinux-policy-3.6.32-46.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed) 2.6.31.6-xen #5 SMP
                              Thu Nov 26 14:12:06 CET 2009 x86_64 x86_64
Alert Count                   1
First Seen                    Thu 26 Nov 2009 03:03:04 PM CET
Last Seen                     Thu 26 Nov 2009 03:03:04 PM CET
Local ID                      359b1fa8-1dbf-41b0-9470-f5f81a5cf422
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1259244184.74:41): avc:  denied  { search } for  pid=4242 comm="xenstored" name="/" dev=xenfs ino=1 scontext=unconfined_u:system_r:xenstored_t:s0 tcontext=system_u:object_r:xenfs_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1259244184.74:41): arch=c000003e syscall=2 success=no exit=-13 a0=3463412c6f a1=2 a2=0 a3=54 items=0 ppid=1 pid=4242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="xenstored" exe="/usr/sbin/xenstored" subj=unconfined_u:system_r:xenstored_t:s0 key=(null)



Hash String generated from  selinux-policy-3.6.32-46.fc12,catchall,xenstored,xenstored_t,xenfs_t,dir,search
audit2allow suggests:

#============= xenstored_t ==============
allow xenstored_t xenfs_t:dir search;