Mislabeled chronyc socket

Solution Verified - Updated -

Issue

  • SELinux is preventing chronyd from sendto access on the unix_dgram_socket
  • The chronyc socket has an incorrect SELinux context
  • sosreport generated as a cron job throws SELinux avc denial on a chronyc socket
  • the xinetd check_mk agent to monitor chronyd service stopped working
  • the systemd check_mk service to monitor chronyd service stopped working

Environment

  • RHEL 7.4
  • chrony-3.1-2.el7
  • selinux-policy-3.13.1-166.el7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content