Description of problem:
Oracle-XE on RHEL-5, Spacewalk 11:
# grep denied /var/log/audit/audit.log
type=AVC msg=audit(1279527867.515:9): avc:  denied  { read write } for  pid=1136 comm="tnslsnr" path="/dev/console" dev=tmpfs ino=564 scontext=system_u:system_r:oracle_tnslsnr_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
type=AVC msg=audit(1279527868.375:16): avc:  denied  { read write } for  pid=1139 comm="oracle" path="/dev/console" dev=tmpfs ino=564 scontext=system_u:system_r:oracle_db_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
type=AVC msg=audit(1279527871.872:17): avc:  denied  { ioctl } for  pid=1139 comm="oracle" path="/dev/console" dev=tmpfs ino=564 scontext=system_u:system_r:oracle_db_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file

Version-Release number of selected component (if applicable):
oracle-xe-selinux-10.2-16.el5
oracle-xe-univ-10.2.0.1-1.0

How reproducible:
Always in SELinux permissive

Steps to Reproduce:
1. Install RHEL-5, selinux permissive
2. Setup Spacewalk 1.1 repos
3. Install Oracle-XE according to instructions on Spacewalk trac
  
Actual results:
SELinux denials.

Expected results:
No denials.

Additional info:
This denial shows only in permissive mode, in enforcing the audit.log
is clear.