>> Weird, I'm not seeing this...
>
> Are using an selinux-enabled CentOS 4.2 (or RHEL4U2) box?
Yes, an up2date Centos 4.2 box with selinux at the default targeted value.
However:
$ su -
Password:
# selinuxenabled; echo $?
0
# getenforce
Enforcing
# dmesg | grep audit
audit: initializing netlink socket (disabled)
audit(1137427005.934:1): initialized
audit(1137427089.579:2): avc: denied { search } for pid=2250
comm="syslogd" name="spool" dev=dm-2 ino=313610
scontext=user_u:system_r:syslogd_t tcontext=system_u:object_r:var_spool_t
tclass=dir
But I guess it's only enabled for selected daemons...
Cheers,
MaZe.