Attempting to log the output of service initialization on CentOS 6.5 causes SELinux violations

It looks like puppet is creating a file in /tmp to connect to the stdout of service httpd start to. Out of the box CentOS 6 (and I can only assume RHEL 6) does not permit Apache to write to /tmp, causing an SELinux violation similar to the following:

kernel: type=1400 audit(1398909812.247:10): avc: denied

for pid=20375 comm="httpd" path="/tmp/puppet20140501-19869-xtobvy-0" dev=xvde ino=18584 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:initrc_tmp_t:s0 tclass=file

I suspect this had to do with bringing the service resource providers up to feature parity with the exec resource providers.

The workaround would be to accept not getting Apache's startup output when using Puppet, or create an selinux module to permit apache writing to /tmp.