kernel: : type=1400 audit(1355841452.964:21866): avc:  denied  { fowner } for  pid=861 comm="syslog-ng" capability=3  scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=capability