Mislabeled chronyc socket
Issue
- SELinux is preventing
chronyd
fromsendto
access on theunix_dgram_socket
- The chronyc socket has an incorrect SELinux context
- sosreport generated as a cron job throws SELinux avc denial on a chronyc socket
- the xinetd check_mk agent to monitor chronyd service stopped working
- the systemd check_mk service to monitor chronyd service stopped working
Environment
- RHEL 7.4
- chrony-3.1-2.el7
- selinux-policy-3.13.1-166.el7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.