This is the first one. Summary SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to sbin (bin_t). Detailed Description SELinux denied access requested by /sbin/rpc.statd. It is not expected that this access is required by /sbin/rpc.statd and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for sbin, restorecon -v sbin If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Additional Information Source Context system_u:system_r:rpcd_t Target Context system_u:object_r:bin_t Target Objects sbin [ dir ] Affected RPM Packages nfs-utils-1.0.12-4.fc7 [application]filesystem-2.4.6-1.fc7 [target] Policy RPM selinux-policy-2.6.4-8.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name plugins.catchall_file Host Name cymage-laptop Platform Linux cymage-laptop 2.6.21-1.3194.fc7 #1 SMP Wed May 23 22:35:01 EDT 2007 i686 i686 Alert Count 1 First Seen Tue 09 Oct 2007 01:23:15 PM EDT Last Seen Tue 09 Oct 2007 01:23:15 PM EDT Local ID f70da51f-b723-4c5b-92ce-0791b4150752 Line Numbers Raw Audit Messages avc: denied { search } for comm="rpc.statd" dev=sda3 egid=0 euid=0 exe="/sbin/rpc.statd" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="sbin" pid=5547 scontext=system_u:system_r:rpcd_t:s0 sgid=0 subj=system_u:system_r:rpcd_t:s0 suid=0 tclass=dir tcontext=system_u:object_r:bin_t:s0 tty=(none) uid=0 This is the second one. Summary SELinux is preventing access to files with the default label, default_t. Detailed Description SELinux permission checks on files labeled default_t are being denied. These files/directories have the default label on them. This can indicate a labeling problem, especially if the files being referred to are not top level directories. Any files/directories under standard system directories, /usr, /var. /dev, /tmp, ..., should not be labeled with the default label. The default label is for files/directories which do not have a label on a parent directory. So if you create a new directory in / you might legitimately get this label. Allowing Access If you want a confined domain to use these files you will probably need to relabel the file/directory with chcon. In some cases it is just easier to relabel the system, to relabel execute: "touch /.autorelabel; reboot" Additional Information Source Context system_u:system_r:cupsd_t:SystemLow-SystemHigh Target Context system_u:object_r:default_t Target Objects root [ dir ] Affected RPM Packages filesystem-2.4.6-1.fc7 [target] Policy RPM selinux-policy-2.6.4-8.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name plugins.default Host Name cymage-laptop Platform Linux cymage-laptop 2.6.21-1.3194.fc7 #1 SMP Wed May 23 22:35:01 EDT 2007 i686 i686 Alert Count 1 First Seen Tue 09 Oct 2007 12:31:45 PM EDT Last Seen Tue 09 Oct 2007 12:31:45 PM EDT Local ID e262154d-ad6b-4f51-ac73-f7af15e20791 Line Numbers Raw Audit Messages avc: denied { search } for comm="python" dev=sda3 egid=7 euid=0 exe="/usr/bin/python" exit=-13 fsgid=7 fsuid=0 gid=7 items=0 name="root" pid=2652 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 sgid=7 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 suid=0 tclass=dir tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0