Description of problem:
Package system-config-kdump is unable to get kernel informations via grubby command.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.9.16-38.fc15.noarch

How reproducible:
100%

Steps to Reproduce:
1. start `system-config-kdump'
2.
3.
  
Actual results:
Errors and AVC deny

Expected results:


Additional info:
Looks like grubby changed, but I'm not sure.
system-config-kdump is using dbus and calls external programs (like grubby).

Details from sealert:
SELinux is preventing grubby from read access on the lnk_file /etc/mtab.

*****  Plugin restorecon (99.5 confidence) suggests  *************************

If you want to fix the label. 
/etc/mtab default label should be etc_t.
Then you can run restorecon.
Do
# /sbin/restorecon -v /etc/mtab

*****  Plugin catchall (1.49 confidence) suggests  ***************************

If you believe that grubby should be allowed read access on the mtab lnk_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep grubby /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:kdumpgui_t:s0-s0:c0.c1023
Target Context                system_u:object_r:etc_runtime_t:s0
Target Objects                /etc/mtab [ lnk_file ]
Source                        grubby
Source Path                   grubby
Port                          <Unknown>
Host                          hp-xw6600-02.rhts.eng.bos.redhat.com
Source RPM Packages           
Target RPM Packages           util-linux-2.19.1-1.4.fc15
Policy RPM                    selinux-policy-3.9.16-38.fc15
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     hp-xw6600-02.rhts.eng.bos.redhat.com
Platform                      Linux hp-xw6600-02.rhts.eng.bos.redhat.com
                              2.6.40.4-5.fc15.x86_64 #1 SMP Tue Aug 30 14:38:32
                              UTC 2011 x86_64 x86_64
Alert Count                   1
First Seen                    Mon 12 Sep 2011 03:01:40 PM EDT
Last Seen                     Mon 12 Sep 2011 03:01:40 PM EDT
Local ID                      547032cc-97dd-43c7-b8c9-29c0ae5b9876

Raw Audit Messages
type=AVC msg=audit(1315854100.445:106): avc:  denied  { read } for  pid=6467 comm="grubby" name="mtab" dev=dm-1 ino=2097168 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=lnk_file


Hash: grubby,kdumpgui_t,etc_runtime_t,lnk_file,read

audit2allow

#============= kdumpgui_t ==============
allow kdumpgui_t etc_runtime_t:lnk_file read;

audit2allow -R

#============= kdumpgui_t ==============
allow kdumpgui_t etc_runtime_t:lnk_file read;