seLinux

audit2allow -a
grep logrotate /var/log/audit/audit.log | audit2allow -M logrotate
selinux -i logrotate.pp