Summary:

SELinux is preventing /usr/bin/ncftool "relabelto" access on
system-config-firewall.augnew.

Detailed Description:

[ncftool has a permissive type (ncftool_t). This access was not denied.]

SELinux denied access requested by ncftool. It is not expected that this access
is required by ncftool and this access may signal an intrusion attempt. It is
also possible that the specific version or configuration of the application is
causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                unconfined_u:unconfined_r:ncftool_t:s0-s0:c0.c1023
Target Context                system_u:object_r:system_conf_t:s0
Target Objects                system-config-firewall.augnew [ file ]
Source                        ncftool
Source Path                   /usr/bin/ncftool
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           netcf-0.1.6-1.fc13
Target RPM Packages           
Policy RPM                    selinux-policy-3.7.19-33.fc13
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed) 2.6.33.6-147.fc13.x86_64 #1 SMP
                              Tue Jul 6 22:32:17 UTC 2010 x86_64 x86_64
Alert Count                   1
First Seen                    Mon 19 Jul 2010 02:58:52 PM EDT
Last Seen                     Mon 19 Jul 2010 02:58:52 PM EDT
Local ID                      6f0bf08b-f094-49df-b7e5-b28c0465366f
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1279565932.101:29404): avc:  denied  { relabelto } for  pid=4073 comm="ncftool" name="system-config-firewall.augnew" dev=sda1 ino=14185414 scontext=unconfined_u:unconfined_r:ncftool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:system_conf_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1279565932.101:29404): arch=c000003e syscall=189 success=yes exit=0 a0=846ff0 a1=3150a15689 a2=956e30 a3=23 items=0 ppid=4039 pid=4073 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=232 comm="ncftool" exe="/usr/bin/ncftool" subj=unconfined_u:unconfined_r:ncftool_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,ncftool,ncftool_t,system_conf_t,file,relabelto
audit2allow suggests:

#============= ncftool_t ==============
allow ncftool_t system_conf_t:file relabelto;