libreport version: 2.0.6
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.0-7.fc16.x86_64
reason:         SELinux is preventing /sbin/ldconfig from 'read' accesses on the directory /.
time:           Tue Nov  8 23:50:14 2011

description:
:SELinux is preventing /sbin/ldconfig from 'read' accesses on the directory /.
:
:*****  Plugin catchall (50.5 confidence) suggests  ***************************
:
:If you believe that ldconfig should be allowed read access on the  directory by default.
:Then you should report this as a bug.
:You can generate a local policy module to allow this access.
:Do
:allow this access for now by executing:
:# grep ldconfig /var/log/audit/audit.log | audit2allow -M mypol
:# semodule -i mypol.pp
:
:*****  Plugin leaks (50.5 confidence) suggests  ******************************
:
:If you want to ignore ldconfig trying to read access the  directory, because you believe it should not need this access.
:Then you should report this as a bug.  
:You can generate a local policy module to dontaudit this access.
:Do
:# grep /sbin/ldconfig /var/log/audit/audit.log | audit2allow -D -M mypol
:# semodule -i mypol.pp
:
:Additional Information:
:Source Context                unconfined_u:system_r:ldconfig_t:s0-s0:c0.c1023
:Target Context                system_u:object_r:etc_runtime_t:s0
:Target Objects                / [ dir ]
:Source                        ldconfig
:Source Path                   /sbin/ldconfig
:Port                          <Unknown>
:Host                          (removed)
:Source RPM Packages           glibc-2.14.90-13
:Target RPM Packages           filesystem-2.4.44-1.fc16
:Policy RPM                    selinux-policy-3.10.0-51.fc16
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Permissive
:Host Name                     (removed)
:Platform                      Linux (removed)
:                              3.1.0-0.rc10.git0.1.fc16.x86_64 #1 SMP Wed Oct 19
:                              05:02:17 UTC 2011 x86_64 x86_64
:Alert Count                   3
:First Seen                    Sat 29 Oct 2011 01:37:53 AM EDT
:Last Seen                     Sat 29 Oct 2011 01:43:13 AM EDT
:Local ID                      7da0d8fa-c4e5-4fda-b55d-9d62aa04c94b
:
:Raw Audit Messages
:type=AVC msg=audit(1319866993.455:132): avc:  denied  { read } for  pid=3390 comm="ldconfig" path="/" dev=sda8 ino=2 scontext=unconfined_u:system_r:ldconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=dir
:
:
:type=SYSCALL msg=audit(1319866993.455:132): arch=x86_64 syscall=execve success=yes exit=0 a0=6b9e558 a1=d965f90 a2=7fff7e00a228 a3=7f191d8fe9d0 items=0 ppid=1751 pid=3390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm=ldconfig exe=/sbin/ldconfig subj=unconfined_u:system_r:ldconfig_t:s0-s0:c0.c1023 key=(null)
:
:Hash: ldconfig,ldconfig_t,etc_runtime_t,dir,read
:
:audit2allow
:
:#============= ldconfig_t ==============
:#!!!! This avc is allowed in the current policy
:
:allow ldconfig_t etc_runtime_t:dir read;
:
:audit2allow -R
:
:#============= ldconfig_t ==============
:#!!!! This avc is allowed in the current policy
:
:allow ldconfig_t etc_runtime_t:dir read;
: