Timezones and SELinux...

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/27/2012 03:11 PM, enclair wrote:
> Le 27 mars 2012 16:36, Daniel J Walsh <dwalsh at redhat.com <mailto:dwalsh at redhat.com>> a écrit :
> 
> Are you seeing avc messages when you try to change the date/time.
> 
> ausearch -m avc -ts recent
> 
> 
> Yes I am:
> 
> time->Tue Mar 27 21:07:27 2012 type=AVC msg=audit(1332875247.972:80): avc:  denied  { dac_override } for  pid=1962 comm="kcmdatetimehelp" capability=1  scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability
> 
> However I don't use a normal configuration. My /home is mounted with the bind option of mount, I don't know if it can be related.
> 
> 
> 

Doubt it but did you try what I wrote to the first reporter?

> 
> dac_overrride means that you have a process running as root trying to modify a file that is not owned by root.  Usually this means you have a file with the incorrect ownership.
> 
> Now the audit log did not give you the full path, but you can get it by following the instructions detailed here.
> 
> http://danwalsh.livejournal.com/34903.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9yKKEACgkQrlYvE4MpobNTNACgyjShlg5HwNxEZhEyMs2FQ2iz
hmkAoL/dVKImZPEjcrrjXZ2z3EUOEyiD
=44Jf
-----END PGP SIGNATURE-----