Description of problem:
SELinux is preventing /usr/bin/qemu-system-x86_64 from 'read' accesses on the chr_file /dev/net/tun.

*****  Plugin catchall (100. confidence) suggests   **************************

If вы считаете, что qemu-system-x86_64 следует разрешить доступ read к tun chr_file по умолчанию.
Then рекомендуется создать отчет об ошибке.
Чтобы разрешить доступ, можно создать локальный модуль политики.
Do
чтобы разрешить доступ, выполните:
# grep qemu-system-x86 /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:svirt_t:s0:c91,c596
Target Context                system_u:object_r:tun_tap_device_t:s0:c249,c894
Target Objects                /dev/net/tun [ chr_file ]
Source                        qemu-system-x86
Source Path                   /usr/bin/qemu-system-x86_64
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           qemu-system-x86-2.1.2-3.fc21.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-84.fc21.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.16.3-302.fc21.x86_64 #1 SMP Fri
                              Sep 26 14:27:20 UTC 2014 x86_64 x86_64
Alert Count                   146
First Seen                    2014-10-05 20:38:44 NOVT
Last Seen                     2014-10-05 20:39:01 NOVT
Local ID                      5bca03b5-afee-46d3-a85e-ea0ba39f044f

Raw Audit Messages
type=AVC msg=audit(1412516341.380:3620): avc:  denied  { read } for  pid=14946 comm="qemu-system-x86" path="/dev/net/tun" dev="devtmpfs" ino=1299 scontext=system_u:system_r:svirt_t:s0:c91,c596 tcontext=system_u:object_r:tun_tap_device_t:s0:c249,c894 tclass=chr_file permissive=0


type=SYSCALL msg=audit(1412516341.380:3620): arch=x86_64 syscall=read success=no exit=EACCES a0=17 a1=7f392363eb6c a2=11000 a3=20 items=0 ppid=1 pid=14946 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm=qemu-system-x86 exe=/usr/bin/qemu-system-x86_64 subj=system_u:system_r:svirt_t:s0:c91,c596 key=(null)

Hash: qemu-system-x86,svirt_t,tun_tap_device_t,chr_file,read

Version-Release number of selected component:
selinux-policy-3.13.1-84.fc21.noarch

Additional info:
reporter:       libreport-2.2.3
hashmarkername: setroubleshoot
kernel:         3.16.3-302.fc21.x86_64
type:           libreport