This policy needs minor adjustments if I remember correctly: http://codeforthesoul.blogspot.com/2012/02/selinux-policy-to-run-checkyum-with.html