[root@www log]# sealert -l c178214b-fb30-48c5-a597-09b641882067 Summary SELinux is preventing /sbin/e2label (fsadm_t) "read write" to /var/webmin/sessiondb.dir (var_t). Detailed Description SELinux denied /sbin/e2label access to /var/webmin/sessiondb.dir. If this is a swapfile it has to have a file context label of swapfile_t. If you did not intend to use /var/webmin/sessiondb.dir as a swapfile it probably indicates a bug, however it could also signal a intrusion attempt. Allowing Access You can alter the file context by executing chcon -t swapfile_t /var/webmin/sessiondb.dir The following command will allow this access: chcon x-t swapfile_t /var/webmin/sessiondb.dir Additional Information Source Context system_u:system_r:fsadm_t Target Context root:object_r:var_t Target Objects /var/webmin/sessiondb.dir [ file ] Affected RPM Packages e2fsprogs-1.39-10.el5_1.1 [application] Policy RPM selinux-policy-2.4.6-106.el5_1.3 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name plugins.swapfile Host Name siteshelfnet.theplanet.host Platform Linux siteshelfnet.theplanet.host 2.6.18-53.1.6.el5 #1 SMP Wed Jan 16 03:56:43 EST 2008 i686 i686 Alert Count 90 Line Numbers Raw Audit Messages avc: denied { read, write } for comm="e2label" dev=sda3 egid=0 euid=0 exe="/sbin/e2label" exit=0 fsgid=0 fsuid=0 gid=0 items=0 path="/var/webmin/sessiondb.dir" pid=30629 scontext=system_u:system_r:fsadm_t:s0 sgid=0 subj=system_u:system_r:fsadm_t:s0 suid=0 tclass=file tcontext=root:object_r:var_t:s0 tty=(none) uid=0