I ran this with setenforce 0, it matches what the nightly run produced: sudo runcon system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 /etc/cron.daily/exim-tidydb Result: type=AVC msg=audit(1313877332.182:692936): avc: denied { write } for pid=13815 comm="exim_tidydb" name="retry.lockfile" dev=vda2 ino=6311 scontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 tcontext=system_u:object_r:exim_spool_t:s0 tclass=file -Robin
Crap, this is a dupe of https://bugzilla.redhat.com/show_bug.cgi?id=730499 ; the chcon that dwalsh suggested fixed this problem. Sorry about that. -Robin
*** This bug has been marked as a duplicate of bug 730499 ***