Stephen Smalley writes:
If you look closely at the AVC audit message (which admittedly is
inscrutable ;), you'll see that the component on which search failed was
for "home", not "/home/adb".
Aha, the PATH audit entry doesn't mean what I thought it meant. Guess
I should have checked the inode too.
Thanks for the pointer, it works now! :-)