Description of problem:
I was trying to check a local mysqld via NRPE in Nagios
SELinux is preventing /usr/lib64/nagios/plugins/check_mysql from 'getattr' accesses on the file /etc/my.cnf.

*****  Plugin catchall (100. confidence) suggests  ***************************

If cree que de manera predeterminada, check_mysql debería permitir acceso getattr sobre  my.cnf file.     
Then debería reportar esto como un error.
Puede generar un módulo de política local para permitir este acceso.
Do
permita el acceso momentáneamente executando:
# grep check_mysql /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:nagios_services_plugin_t:s0
Target Context                unconfined_u:object_r:mysqld_etc_t:s0
Target Objects                /etc/my.cnf [ file ]
Source                        check_mysql
Source Path                   /usr/lib64/nagios/plugins/check_mysql
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           nagios-plugins-mysql-1.4.16-5.fc18.x86_64
Target RPM Packages           mysql-libs-5.5.31-1.fc18.x86_64
Policy RPM                    selinux-policy-3.11.1-92.fc18.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.8.11-200.fc18.x86_64 #1 SMP Wed
                              May 1 19:44:27 UTC 2013 x86_64 x86_64
Alert Count                   2
First Seen                    2013-05-07 22:36:44 CEST
Last Seen                     2013-05-07 22:36:51 CEST
Local ID                      8a829da0-1d5d-4e74-af3c-4a6740a01197

Raw Audit Messages
type=AVC msg=audit(1367959011.319:6221): avc:  denied  { getattr } for  pid=18156 comm="check_mysql" path="/etc/my.cnf" dev="dm-2" ino=921687 scontext=system_u:system_r:nagios_services_plugin_t:s0 tcontext=unconfined_u:object_r:mysqld_etc_t:s0 tclass=file


type=SYSCALL msg=audit(1367959011.319:6221): arch=x86_64 syscall=stat success=no exit=EACCES a0=7fffa4925f50 a1=7fffa4925cc0 a2=7fffa4925cc0 a3=7fffa49259e0 items=0 ppid=18155 pid=18156 auid=4294967295 uid=981 gid=976 euid=981 suid=981 fsuid=981 egid=976 sgid=976 fsgid=976 ses=4294967295 tty=(none) comm=check_mysql exe=/usr/lib64/nagios/plugins/check_mysql subj=system_u:system_r:nagios_services_plugin_t:s0 key=(null)

Hash: check_mysql,nagios_services_plugin_t,mysqld_etc_t,file,getattr

audit2allow

#============= nagios_services_plugin_t ==============
allow nagios_services_plugin_t mysqld_etc_t:file getattr;

audit2allow -R
require {
	type nagios_services_plugin_t;
}

#============= nagios_services_plugin_t ==============
mysql_read_config(nagios_services_plugin_t)


Additional info:
hashmarkername: setroubleshoot
kernel:         3.8.11-200.fc18.x86_64
type:           libreport