Thanks,
I had driftfile pointing to /etc/ntp and changing it to /var/lib/ntp fixed it. It's a file I've carried forward for at least four years.
Mark
On Sun, 23 Jan 2005 14:30:30 -0500 (EST), mroselinux@eastgranby.k12.ct.us mroselinux@eastgranby.k12.ct.us wrote:
I have just built an FC3 samba server using the K12LTSP iso's and am getting the following messages on the log.
Jan 21 01:55:14 admin ntpd[9988]: can't open /etc/ntp/drift.TEMP: Permission denied Jan 21 01:55:14 admin kernel: audit(1106290514.375:0): avc: denied { write } for pid=9988 exe=/usr/sbin/ntpd name=ntp dev=hda3 ino=3392705 scontext=root:system_r:ntpd_t tcontext=system_u:object_r:etc_t tclass=dir
With SELinux enabled, the drift file could not be created. In permissive mode, the drift file is properly created and updated. What have I done wrong?
[root@admin ntp]# ls -dZ . drwxr-xr-x ntp ntp system_u:object_r:etc_t [root@admin ntp]# ls -lZ drift -rw-r--r-- ntp ntp root:object_r:etc_t drift
version of ntp?
Mine (ntp-4.2.0.a.20040617-6) places the drift file in /var/lib/ntp. /var/lib/ntp seems appropriately labeled ntp_drift_t.
tom
-- Tom London
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-selinux-list