space_left = 75
> #space_left_action = SYSLOG
> space_left_action = email
> action_mail_acct = scook(a)ntis.gov
^^^
This is where you are getting the DNS issues running from a child.
To be a little more concrete, it would seem that policy is missing a transition from
auditd_t to sendmail's context and this is causing your avcs. But the reason this is
happening in the first place is that your audit partition is likely full. Besides clearing
space, you might want to change from email notification to something else until a new
policy can be made with the auto transition.
-Steve
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search.
http://tools.search.yahoo.com/newsearch/category.php?category=shopping