sesearch

Need to figure out what bit of selinux policy is forbidding something? sesearch is what you want.