audit update breaks hwclock

[dragoran]

dragoran wrote:

> After updating audit today I get an error after udev is started that 
> says that it can't connot to the audit system.
> I found this in the audit logs:
>
>> type=AVC msg=audit(1122549673.001:7418105): avc:  denied  { create } 
>> for  pid=34 19 comm="hwclock" scontext=root:system_r:hwclock_t 
>> tcontext=root:system_r:hwcloc k_t tclass=netlink_audit_socket
>> type=SYSCALL msg=audit(1122549673.001:7418105): arch=c000003e 
>> syscall=41 success =no exit=-13 a0=10 a1=3 a2=9 a3=42e8bfa9 items=0 
>> pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 
>> sgid=0 fsgid=0 comm="hwclock" exe="/sbin/hwclock"
>
>
> this results in an incorrect clock (+2h)
> I am not using ntpd.
> Timezonesettings are correct and it worked fine after the update.
>
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>
setiing the clock with system-config-date works but I get this in the logs:

> type=AVC msg=audit(1122550262.001:698688): avc:  denied  { create } 
> for  pid=3211 comm="hwclock" scontext=root:system_r:hwclock_t 
> tcontext=root:system_r:hwclock_t tclass=netlink_audit_socket
> type=SYSCALL msg=audit(1122550262.001:698688): arch=c000003e 
> syscall=41 success=no exit=-13 a0=10 a1=3 a2=9 a3=42e8c1f6 items=0 
> pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 
> sgid=0 fsgid=0 comm="hwclock" exe="/sbin/hwclock"

and after reboot the time is incorrect again.