agentultra/openstack-guest-agents-unix — pull request #1 by prometheanfire (2012-11-01 15:19:55+00:00)
Title: Update selinux/openstackguestagent.te

add search for tmpfs_t

I didn't see why this is wanting to be executed, not knowing what it is or how it was created makes me say no. If you see this line again, can you find out what the file is? The inode is in the log line so you can find it that way.

type=AVC msg=audit(1351020235.886:6): avc: denied { execute } for pid=774 comm="nova-agent" path=2F7661722F746D702F666669544E35745934202864656C6574656429 dev=xvda1 ino=393437 scontext=system_u:system_r:openstack_guest_agent_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file