avc denied about hwclock.

[Vinicius]

Hello,

I'm getting the following on FC4:
"audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"

How to resolve this problem, please?

TIA,

Vinicius.

[Ivan Gyurdiev]

On Wed, 2005-06-29 at 05:41 -0300, Vinicius wrote:
> Hello,
>
> I'm getting the following on FC4:
> "audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
> comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
> audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
> comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"
>
> How to resolve this problem, please?

The file is incorrectly labeled for some reason.
Do: restorecon /etc/localtime as root.
The type should be locale_t

[Daniel J Walsh]

Vinicius wrote:
> Hello,
>
> I'm getting the following on FC4:
> "audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
> comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
> audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
> comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"
>
> How to resolve this problem, please?

restorecon /etc/localtime

Any idea how this file is getting created?
> TIA,
>
> Vinicius.
>
> -- 
> fedora-selinux-list mailing list
> [e-mail]
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Vinicius]

Daniel J Walsh escreveu:
> Vinicius wrote:
> > Hello,
> >
> > I'm getting the following on FC4:
> > "audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
> > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
> > audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
> > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"
> >
> > How to resolve this problem, please?
>
> restorecon /etc/localtime
>
> Any idea how this file is getting created?
> > TIA,
> >
> > Vinicius.

through the program *zic*, we can create a file that contains time zone 
information. The output of the zic is renamed to /etc/localtime. It's 
very useful on Brazil because of the daylight time savings.

I have the source information in brazilian portuguese if you wish.

Best regards,

Vinicius.

[Vinicius]

Vinicius escreveu:
> Daniel J Walsh escreveu:
> > Vinicius wrote:
> > > Hello,
> > >
> > > I'm getting the following on FC4:
> > > "audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
> > > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
> > > audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
> > > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"
> > >
> > > How to resolve this problem, please?
> >
> > restorecon /etc/localtime
> >
> > Any idea how this file is getting created?
> > > TIA,
> > >
> > > Vinicius.
>
> through the program *zic*, we can create a file that contains time zone 
> information. The output of the zic is renamed to /etc/localtime. It's 
> very useful on Brazil because of the daylight time savings.
>
> I have the source information in brazilian portuguese if you wish.
>
> Best regards,
>
> Vinicius.

instead of "daylight time savings", I mean "summer time" (I think).

Bad translation, sorry :-(.

Vinicius.

[Daniel J Walsh]

Vinicius wrote:
> Vinicius escreveu:
> > Daniel J Walsh escreveu:
> > > Vinicius wrote:
> > > > Hello,
> > > >
> > > > I'm getting the following on FC4:
> > > > "audit(1119989359.942:2): avc:  denied  { read } for  pid=1427 
> > > > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > > > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file
> > > > audit(1119989359.942:3): avc:  denied  { read } for  pid=1427 
> > > > comm="hwclock" name=localtime dev=dm-0 ino=1502961 scontext=s
> > > > ystem_u:system_r:hwclock_t tcontext=root:object_r:etc_t tclass=file"
> > > >
> > > > How to resolve this problem, please?
> > >
> > > restorecon /etc/localtime
> > >
> > > Any idea how this file is getting created?
> > > > TIA,
> > > >
> > > > Vinicius.
> >
> > through the program *zic*, we can create a file that contains time 
> > zone information. The output of the zic is renamed to /etc/localtime. 
> > It's very useful on Brazil because of the daylight time savings.
> >
> > I have the source information in brazilian portuguese if you wish.
> >
> > Best regards,
> >
> > Vinicius.
>
> instead of "daylight time savings", I mean "summer time" (I think).
>
> Bad translation, sorry :-(.

We call it "Daylight Savings Time"
Simple fix to the script would be to add restorecon /etc/localtime in 
the script to correct the file context.
> Vinicius.
>
> -- 
> fedora-selinux-list mailing list
> [e-mail]
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Christofer C. Bell]

On 7/4/05, Daniel J Walsh  wrote:
> We call it "Daylight Savings Time"

Just to make sure everyone is on the same (and correct) page, the term
in the United States is "Daylight Saving Time" not "Daylight Savings
Time."  Most of the rest of the world does, indeed, refer to it as
"Summer Time."  I'm sure anyone interested in the history of the
practise (at least it in the United States) can find a wealth of
information via google.