Summary:

SELinux is preventing
/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/java "read" access on
ipv6_route.

Detailed Description:

SELinux denied access requested by java. It is not expected that this access is
required by java and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                xguest_u:xguest_r:xguest_java_t:s0
Target Context                system_u:object_r:proc_net_t:s0
Target Objects                ipv6_route [ file ]
Source                        java
Source Path                   /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre
                              /bin/java
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           java-1.6.0-openjdk-1.6.0.0-33.b16.fc12
Target RPM Packages           
Policy RPM                    selinux-policy-3.6.32-92.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux endeavour.local 2.6.32.9-70.fc12.x86_64 #1
                              SMP Wed Mar 3 04:40:41 UTC 2010 x86_64 x86_64
Alert Count                   1
First Seen                    Wed 10 Mar 2010 12:34:04 PM COT
Last Seen                     Wed 10 Mar 2010 12:34:04 PM COT
Local ID                      1e7de2d6-e373-46a6-b7f7-78b1a07fe5f1
Line Numbers                  

Raw Audit Messages            

node=endeavour.local type=AVC msg=audit(1268242444.354:18): avc:  denied  { read } for  pid=1900 comm="java" name="ipv6_route" dev=proc ino=4026532211 scontext=xguest_u:xguest_r:xguest_java_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file

node=endeavour.local type=SYSCALL msg=audit(1268242444.354:18): arch=c000003e syscall=2 success=no exit=-13 a0=7fee225bd939 a1=0 a2=1b6 a3=0 items=0 ppid=1893 pid=1900 auid=511 uid=511 gid=511 euid=511 suid=511 fsuid=511 egid=511 sgid=511 fsgid=511 tty=(none) ses=1 comm="java" exe="/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/java" subj=xguest_u:xguest_r:xguest_java_t:s0 key=(null)



Hash String generated from  catchall,java,xguest_java_t,proc_net_t,file,read
audit2allow suggests:

#============= xguest_java_t ==============
allow xguest_java_t proc_net_t:file read;