From Debian package 0.0.20080702-11
In Manoj's topic--pythonsupport branch (doesn't belong there)

Allow semanage_t (for setsebool and semodule) to call statfs()

Index: policy/modules/system/selinuxutil.te
===================================================================
--- policy/modules/system/selinuxutil.te.orig
+++ policy/modules/system/selinuxutil.te
@@ -428,6 +428,7 @@
 allow semanage_t self:unix_stream_socket create_stream_socket_perms;
 allow semanage_t self:unix_dgram_socket create_socket_perms;
 allow semanage_t self:netlink_audit_socket { create_netlink_socket_perms nlmsg_relay };
+fs_getattr_xattr_fs(semanage_t)
 
 allow semanage_t policy_config_t:file rw_file_perms;