up2date does not work under sudo.

[Aleksey Nogin <aleksey nogin org>]

This seems to be new. With policy-sources-1.9-15 if I try running 
up2date from sudo -r sysadm_r (from a staff user), it fails to actually 
install the packages:

Name                          Version        Rel             Channel
----------------------------------------------------------------------
xorg-x11-xdm                  0.0.6.6        0.0.2004_03_11.9rawhide
xorg-x11-xfs                  0.0.6.6        0.0.2004_03_11.9rawhide


Testing package set / solving RPM inter-dependencies...
########################################
xorg-x11-xdm-0.0.6.6-0.0.20 ########################## Done.
xorg-x11-xfs-0.0.6.6-0.0.20 ########################## Done.
xorg-x11-0.0.6.6-0.0.2004_0 ########################## Done.
Preparing              ########################################### [100%]
The following Packages were marked to be skipped by your configuration:

Name                                    Version        Rel  Reason
-------------------------------------------------------------------------------
ocaml                                   3.07           0.fdr.5.1.90Pkg 
name/pattern

The following packages were added to your selection to satisfy dependencies:

Name                                    Version        Release
--------------------------------------------------------------
xorg-x11                                0.0.6.6        0.0.2004_03_11.9


dmesg shows:

audit(1080298058.273:0): avc:  denied  { transition } for  pid=3821 
exe=/usr/bin/python path=/bin/bash dev=hda2 ino=3662903 
scontext=aleksey:sysadm_r:sysadm_t 
tcontext=aleksey:sysadm_r:rpm_script_t tclass=process
audit(1080298058.306:0): avc:  denied  { transition } for  pid=3822 
exe=/usr/bin/python path=/bin/bash dev=hda2 ino=3662903 
scontext=aleksey:sysadm_r:sysadm_t 
tcontext=aleksey:sysadm_r:rpm_script_t tclass=process
audit(1080298058.333:0): avc:  denied  { transition } for  pid=3823 
exe=/usr/bin/python path=/bin/bash dev=hda2 ino=3662903 
scontext=aleksey:sysadm_r:sysadm_t 
tcontext=aleksey:sysadm_r:rpm_script_t tclass=process
audit(1080298058.431:0): avc:  denied  { transition } for  pid=3824 
exe=/usr/bin/python path=/bin/bash dev=hda2 ino=3662903 
scontext=aleksey:sysadm_r:sysadm_t 
tcontext=aleksey:sysadm_r:rpm_script_t tclass=process

--
Aleksey Nogin

Home Page: http://nogin.org/
E-Mail: nogin cs caltech edu (office), aleksey nogin org (personal)
Office: Jorgensen 70, tel: (626) 395-2907