error: kernel: audit: avc: denied { write }

[Stephen Smalley]

On Tue, 2005-02-01 at 09:45, Roger Skildum wrote:
> I am running FC3 with a vanilla 2.6.10 kernel patched for Win4lin.  I am 
> not sure what has happened but all of a sudden I started getting a whole 
> slew of the errors listed below each time I boot. 
> 
> Jan 30 05:18:48 host kernel: audit(1107080328.663:0): avc:  denied  { 
> write } for  pid=3575 exe=/usr/sbin/ntpd name=log dev=tmpfs ino=6673 
> scontext=user_u:system_r:ntpd_t tcontext=user_u:object_r:device_t 
> tclass=sock_file

What does /sbin/restorecon -v /dev/log show?

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency