Summary:

SELinux is preventing /usr/libexec/fprintd "sys_nice" access .

Detailed Description:

[SELinux is in permissive mode. This access was not denied.]

SELinux denied access requested by fprintd. It is not expected that this access
is required by fprintd and this access may signal an intrusion attempt. It is
also possible that the specific version or configuration of the application is
causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                system_u:system_r:fprintd_t:s0-s0:c0.c1023
Target Context                system_u:system_r:fprintd_t:s0-s0:c0.c1023
Target Objects                None [ capability ]
Source                        fprintd
Source Path                   /usr/libexec/fprintd
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           fprintd-0.2.0-1.fc13
Target RPM Packages           
Policy RPM                    selinux-policy-3.7.19-54.fc13
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.34.6-54.fc13.x86_64 #1 SMP Sun Sep 5 17:16:27
                              UTC 2010 x86_64 x86_64
Alert Count                   2
First Seen                    Thu 09 Sep 2010 03:55:52 PM PDT
Last Seen                     Thu 09 Sep 2010 03:55:52 PM PDT
Local ID                      36143160-aa25-4056-b668-fc564e3396c1
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1284072952.271:26603): avc:  denied  { sys_nice } for  pid=2685 comm="fprintd" capability=23  scontext=system_u:system_r:fprintd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fprintd_t:s0-s0:c0.c1023 tclass=capability

node=(removed) type=AVC msg=audit(1284072952.271:26603): avc:  denied  { setsched } for  pid=2685 comm="fprintd" scontext=system_u:system_r:fprintd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fprintd_t:s0-s0:c0.c1023 tclass=process

node=(removed) type=SYSCALL msg=audit(1284072952.271:26603): arch=c000003e syscall=144 success=yes exit=4294967424 a0=a7d a1=0 a2=7fffbdfa01b0 a3=7fffbdf9ff00 items=0 ppid=1 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fprintd" exe="/usr/libexec/fprintd" subj=system_u:system_r:fprintd_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,fprintd,fprintd_t,fprintd_t,capability,sys_nice
audit2allow suggests:

#============= fprintd_t ==============
allow fprintd_t self:capability sys_nice;
allow fprintd_t self:process setsched;