It seems that the init script needs to be able to read the rsyslog configuration to be able to start the daemon. I think it might be the configtest, but I haven't really looked into it. For now I've added a custom module that simply gives initrc_t permission to read the syslog configuration. Is this the right solution, or is it to re-write the init script or something else? gen_require(` type initrc_t; ') logging_read_syslog_config(initrc_t)