Description of problem:

SELinux is preventing /opt/google/chrome/chrome from execute access on the file
nacl_helper_bootstrap.

*****  Plugin catchall_labels (83.8 confidence) suggests  ********************

If you want to allow chrome to have execute access on the nacl_helper_bootstrap
file
Then you need to change the label on nacl_helper_bootstrap
Do
# semanage fcontext -a -t FILE_TYPE 'nacl_helper_bootstrap'
where FILE_TYPE is one of the following: execmem_exec_t, lib_t,
abrt_helper_exec_t, ld_so_t, chrome_sandbox_exec_t, bin_t, textrel_shlib_t. 
Then execute: 
restorecon -v 'nacl_helper_bootstrap'


*****  Plugin catchall (17.1 confidence) suggests  ***************************

If you believe that chrome should be allowed execute access on the
nacl_helper_bootstrap file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep chrome /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context               
unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c
                              0.c1023
Target Context                system_u:object_r:usr_t:s0
Target Objects                nacl_helper_bootstrap [ file ]
Source                        chrome
Source Path                   /opt/google/chrome/chrome
Port                          <Unknown>
Host                          XXXXXXX
Source RPM Packages           google-chrome-stable-15.0.874.102-106587
Target RPM Packages           
Policy RPM                    selinux-policy-3.9.7-44.fc14
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     XXXXXXX
Platform                      Linux XXXXXXXX 2.6.35.14-97.fc14.x86_64 #1 SMP
                              Sat Sep 17 00:15:37 UTC 2011 x86_64 x86_64
Alert Count                   1
First Seen                    Tue 25 Oct 2011 09:41:49 PM PDT
Last Seen                     Tue 25 Oct 2011 09:41:49 PM PDT
Local ID                      3aae5d82-c6ff-4edd-b4b6-60c8e5d3a3b8

Raw Audit Messages
type=AVC msg=audit(1319604109.864:39401): avc:  denied  { execute } for 
pid=3494 comm="chrome" name="nacl_helper_bootstrap" dev=dm-0 ino=275554
scontext=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023
tcontext=system_u:object_r:usr_t:s0 tclass=file


type=SYSCALL msg=audit(1319604109.864:39401): arch=x86_64 syscall=execve
success=no exit=EACCES a0=7f534703b928 a1=7f5347050760 a2=7fff54004ba0
a3=7fff540009c0 items=0 ppid=1 pid=3494 auid=500 uid=500 gid=500 euid=500
suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm=chrome
exe=/opt/google/chrome/chrome
subj=unconfined_u:unconfined_r:chrome_sandbox_t:s0-s0:c0.c1023 key=(null)

Hash: chrome,chrome_sandbox_t,usr_t,file,execute

audit2allow

#============= chrome_sandbox_t ==============
allow chrome_sandbox_t usr_t:file execute;

audit2allow -R

#============= chrome_sandbox_t ==============
allow chrome_sandbox_t usr_t:file execute;

How reproducible:

Consistently reproducible. 

Steps to Reproduce:

1. Open Chrome
  
Actual results:

SELinux Error

Expected results:

No SELinux Error