rhgb - bootup denials

[Tom London <selinux@xxxxxxxxxxx>]

With strict/enforcing, I get the following avcs at bootup.
Looks like rhgb does not 'run'; I get a text-style boot
display.

Jul 21 10:47:52 fedora kernel: audit(1090406834.263:0): avc:  denied  { 
mounton } for  pid=533 exe=/usr/bin/rhgb path=/initrd dev=ram0 ino=2 
scontext=system_u:system_r:rhgb_t tcontext=system_u:object_r:file_t 
tclass=dir
Jul 21 10:47:52 fedora kernel: audit(1090406834.263:0): avc:  denied  { 
sys_admin } for  pid=533 exe=/usr/bin/rhgb capability=21 
scontext=system_u:system_r:rhgb_t tcontext=system_u:system_r:rhgb_t 
tclass=capability

audit2allow on this yields:
allow rhgb_t file_t:dir { mounton };
allow rhgb_t rhgb_t:capability { sys_admin };

but this seems a bit too 'heavy'.....

tom