On Sun, Nov 18, 2012 at 22:58:14 -0600, Ian Pilcher <arequipeno at gmail.com> wrote: > >Is this expected behavior for some reason? Anyone ever seen anything >like this? There are don't audit rules. You disable don't audit rules using semodule -DB . semodule -B will restore things to the normal state.