Tcpdump I Selinux

[jjj]

Dla celów diagnostycznych odpalam sobie tcpdump

tcplog=/var/log/tcpdump/tcpdump.log
/usr/sbin/tcpdump  -i eth0 >> &tcplog 2>&1 &

i sie ciesze. Próbuje to samo wywolac z /etc/rc.d/rc.local. I kicha:

<datetime> <hostname> kernel: audit(1173952748.751:4): avc:  denied  { append } for  pid=2404 comm="tcpdump" name="tcpdump.log" dev=hda1 ino=295918 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
<datetime> <hostname> kernel: audit(1173952748.753:5): avc:  denied  { append } for  pid=2404 comm="tcpdump" name="tcpdump.log" dev=hda1 ino=295918 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
<datetime> <hostname> kernel: audit(1173952748.975:7): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952748.977:8): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952748.978:9): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="sys" dev=proc ino=-268435429 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952748.979:10): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952748.980:11): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952749.875:12): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir
<datetime> <hostname> kernel: audit(1173952749.877:13): avc:  denied  { search } for  pid=2404 comm="tcpdump" name="nscd" dev=hda1 ino=295452 scontext=system_u:system_r:netutils_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir

Zapewne musze wywolac jakies chcon. Tylko jakie? Mam ustawione

$ ls -lZ /var/log/tcpdump/tcpdump.log
-rw-------  root root system_u:object_r:var_log_t	  /var/log/tcpdump/tcpdump.log

sa takie same jak dla innych, dzialajacych logów.