http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_sysstat.patch systat has log directories and lnk files that systat needs to manage Needs dac_override.