Anybody understand SELinux?

[Hal Murray]

I want to add a file to /etc/logrotate.d/ to tell logrotate how to process 
ntpd's log files.
I get email telling me:
  /etc/cron.daily/logrotate:

  error: failed to open config file ntpd: Permission denied
  error: found error in file ntpd, skipping

google tells me that's because SELinux is blocking access.
ls -lZ confirms that my new file is different, but I haven't found the recipe 
to fix it.
-rw-r--r--. 1 root root system_u:object_r:etc_t:s0     165 Nov 14 13:07 
libvirtd
-rw-r--r--. 1 root root system_u:object_r:etc_t:s0     163 Nov 14 13:07 
libvirtd.qemu
-rw-r--r--. 1 root root unconfined_u:object_r:etc_t:s0 117 Jul 10 02:21 ntpd
-rw-r--r--. 1 root root system_u:object_r:etc_t:s0     106 Jun  2  2015 numad

I expect I can find it eventually, but I've  already spent enough time 
looking.

We'll have to document this eventually.


-- 
These are my opinions.  I hate spam.