I see the same thing on RHEL 6.5.

So should I assume this is a bug in SElinux/OS?  Even so is there a way that I can work around it?  Would there be anything wrong with transitioning files I create in tmp from tmp_t to user_tmp_t?

> Date: Thu, 20 Feb 2014 14:21:55 -0500
> From: dwalsh@redhat.com
> To: swazup@hotmail.com; selinux@lists.fedoraproject.org
> Subject: Re: Correct way to use booleans
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 02/20/2014 01:41 PM, Jayson Hurst wrote:
> > I am running in permissive mode, my module is in permissive mode.
> >
> > I am actually running on RHEL 6.0.
> >
> > So in this scenario even though my daemon is authenticating the user it is
> > not responsible for context that the krb5cc_xxx file gets created as?
> >
>
> The login daemons should be creating this file with the correct context.
> user_tmp_t.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlMGVdMACgkQrlYvE4MpobPm+QCfX1s69csbRU8xfg8m796N+9Si
> cZYAmgP8bmo4vV+ug10x8tlxKSr6rTqI
> =2zvU
> -----END PGP SIGNATURE-----