From Debian package 0.0.20080702-1 In russell-20080929.diff Redundantly dontaudit ldconfig using apt fds Came from 365_apt_fixes Upstream has apt_use_fds(ldconfig_t) but this was still left in Debian package Index: policy/modules/system/libraries.te =================================================================== --- policy/modules/system/libraries.te.orig +++ policy/modules/system/libraries.te @@ -97,6 +97,11 @@ userdom_use_user_terminals(ldconfig_t) userdom_use_all_users_fds(ldconfig_t) +optional_policy(` + # This is needed for apt to get and install packages silently + apt_dontaudit_use_fds(ldconfig_t) +') + ifdef(`distro_ubuntu',` optional_policy(` unconfined_domain(ldconfig_t)