Unable to modify a file in enforcing mode, but no denials seen even after semodule -DB

[Radha Venkatesh (radvenka)]

Any input on the below question?

From: Radha Venkatesh (radvenka)
Sent: Tuesday, July 30, 2013 4:12 PM
To: fedora-selinux-list at redhat.com; selinux at lists.fedoraproject.org
Cc: ipc-selinux-dev(mailer list); Prakash Mishra -X (prakasmi - INFOSYS TECHNOLOGIES LIMITED at Cisco)
Subject: Unable to modify a file in enforcing mode, but no denials seen even after semodule -DB

We have a strange issue showing up in our system. We are trying to modify a configuration file - we are unable to in enforcing mode but are able to in permissive mode. There are no denials seen.

We have run semodule -DB, to get to the hidden denials, but to no avail.

Could you give us some pointers on how to get to the bottom of this?

Thanks,
Radha.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20130731/538146c4/attachment.html>