That should not happen does sesearch know the rules?
sesearch -SC --allow -s voip_sandbox_t -t voip_sandbox_t -c process -p
execmem
make sure that the rules is loaded
My bad! Forgot to include the new version of the module in the final
build. It works as expected now - got two more AVCs (setsched and
getattr on a shared MySQL file loading charsets), but I was expecting
this sort of thing.