Description of problem:

1. typo in /usr/share/doc/suricata-1.4.1/fedora.notes

- tar -xz -C /etc/suricata/rules/emerging --strip-components=1 -f emerging.rules.targ.gz
+ tar -xz -C /etc/suricata/rules/emerging --strip-components=1 -f emerging.rules.tar.gz

2. /run/suricata directory not installed by package and no systemd-tmpfiles configuration present:

# /usr/bin/suricatasc
Unable to connect to socket /var/run/suricata/suricata-command.socket: [Errno 2] No such file or directory

3. initial suricata SELinux policy:

policy_module(suricata, 1.0.0)

########################################
#
# Declarations
#

type suricatad_t;
type suricatad_exec_t;
init_daemon_domain(suricatad_t, suricatad_exec_t)

type suricatad_unit_file_t;
systemd_unit_file(suricatad_unit_file_t)

type suricatad_conf_t;
files_config_file(suricatad_conf_t)

type suricatad_log_t;
logging_log_file(suricatad_log_t)

########################################
#
# Local policy
#

allow suricatad_t self:capability net_raw;
allow suricatad_t self:process { setsched execmem };
allow suricatad_t self:packet_socket create_socket_perms;
allow suricatad_t self:udp_socket create_socket_perms;

read_files_pattern(suricatad_t, suricatad_conf_t, suricatad_conf_t)

allow suricatad_t suricatad_log_t:dir { setattr_dir_perms add_entry_dir_perms };
allow suricatad_t suricatad_log_t:file { read_file_perms create_file_perms setattr_file_perms append_file_perms };

kernel_read_network_state(suricatad_t)
kernel_read_system_state(suricatad_t)

dev_list_sysfs(suricatad_t)
dev_read_urand(suricatad_t)

files_list_tmp(suricatad_t)

auth_read_passwd(suricatad_t)
## <summary>Intrusion Detection and Prevention Engine.</summary>

########################################
## <summary>
##	All of the rules required to
##	administrate an suricata environment.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## <rolecap/>
#
interface(`suricata_admin',`
	gen_require(`
		type suricatad_t, suricatad_unit_file_t, suricatad_log_t;
		type suricatad_conf_t;
	')

	allow $1 suricatad_t_t:process { ptrace signal_perms };
	ps_process_pattern($1, suricatad_t)

	systemd_exec_systemctl($1)
	admin_pattern($1, suricatad_unit_file_t)
	allow $1 suricatad_unit_file_t:service all_service_perms;

	files_search_etc($1)
	admin_pattern($1, suricatad_conf_t)

	logging_search_logs($1)
	admin_pattern($1, suricatad_log_t)
')
/etc/suricata(/.*)?	gen_context(system_u:object_r:suricatad_conf_t,s0)
/etc/sysconfig/suricata	--	gen_context(system_u:object_r:suricatad_conf_t,s0)
/usr/lib/systemd/system/suricata\.service	--	gen_context(system_u:object_r:suricatad_unit_file_t,s0)
/usr/sbin/suricata	--	gen_context(system_u:object_r:suricatad_exec_t,s0)
/var/log/suricata(/.*)?	gen_context(system_u:object_r:suricatad_log_t,s0)

Version-Release number of selected component (if applicable):

suricata-1.4.1-1.fc18.x86_64