Below are some avc denied messages produced from running "fixfiles restore" in enforcing mode with updated policy-1.11.2-21. Richard Hally
May 2 14:38:19 localhost kernel: audit(1083523099.396:0): avc: denied { getattr } for pid=31565 exe=/usr/sbin/setfiles path=/var/named/chroot/var/named/chroot/dev/null dev=hdc3 ino=2453550 scontext=root:sysadm_r:setfiles_t tcontext=system_u:object_r:named_conf_t tclass=chr_file May 2 14:38:19 localhost kernel: audit(1083523099.397:0): avc: denied { getattr } for pid=31565 exe=/usr/sbin/setfiles path=/var/named/chroot/var/named/chroot/dev/null dev=hdc3 ino=2453550 scontext=root:sysadm_r:setfiles_t tcontext=system_u:object_r:named_conf_t tclass=chr_file May 2 14:38:19 localhost kernel: audit(1083523099.397:0): avc: denied { getattr } for pid=31565 exe=/usr/sbin/setfiles path=/var/named/chroot/var/named/chroot/dev/random dev=hdc3 ino=2453551 scontext=root:sysadm_r:setfiles_t tcontext=system_u:object_r:named_conf_t tclass=chr_file May 2 14:38:19 localhost kernel: audit(1083523099.398:0): avc: denied { getattr } for pid=31565 exe=/usr/sbin/setfiles path=/var/named/chroot/var/named/chroot/dev/random dev=hdc3 ino=2453551 scontext=root:sysadm_r:setfiles_t tcontext=system_u:object_r:named_conf_t tclass=chr_file