Description of problem: Recieve SELinux alert upon boot


Version-Release number of selected component (if applicable):
selinux-policy-3.10.0-80.fc16.noarch

How reproducible: Boot F16, everytime.


Steps to Reproduce:
1.Boot PC
2.
3.
  
Actual results:


Expected results:


Additional info:
I have F16 KDE running with Updates-Testine enabled.  After last update I get SELinux notification.

SELinux is preventing NetworkManager from getattr access on the file /etc/sysctl.conf.

*****  Plugin catchall (100. confidence) suggests  ***************************

If you believe that NetworkManager should be allowed getattr access on the sysctl.conf file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:NetworkManager_t:s0
Target Context                system_u:object_r:system_conf_t:s0
Target Objects                /etc/sysctl.conf [ file ]
Source                        NetworkManager
Source Path                   NetworkManager
Port                          <Unknown>
Host                          fedora16dwkde
Source RPM Packages           
Target RPM Packages           initscripts-9.34.2-1.fc16.i686
Policy RPM                    selinux-policy-3.10.0-80.fc16.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     fedora16dwkde
Platform                      Linux fedora16dwkde 3.3.0-8.fc16.i686.PAE #1 SMP
                              Thu Mar 29 18:26:34 UTC 2012 i686 i686
Alert Count                   1
First Seen                    Sun 01 Apr 2012 12:19:35 PM EDT
Last Seen                     Sun 01 Apr 2012 12:19:35 PM EDT
Local ID                      c5f812ac-c6fa-42c5-ab72-19b44bbbb667

Raw Audit Messages
type=AVC msg=audit(1333297175.322:30): avc:  denied  { getattr } for  pid=891 comm="NetworkManager" path="/etc/sysctl.conf" dev="sda2" ino=28989 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:system_conf_t:s0 tclass=file


Hash: NetworkManager,NetworkManager_t,system_conf_t,file,getattr

audit2allow

#============= NetworkManager_t ==============
allow NetworkManager_t system_conf_t:file getattr;

audit2allow -R

#============= NetworkManager_t ==============
allow NetworkManager_t system_conf_t:file getattr;


Using the workaround listed, the problem persists.  I've tried 3 times now.

Workaround used:
# grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp