ok it was some selinux policy nonsense. I wonder if the linux people make a sport out of seeing who can push out the most baffling policy in the name of "security"