Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-25978

Selinux prevents systemd_timedated from checking timemaster status

    • selinux-policy-38.1.36-1.el9
    • None
    • None
    • 1
    • rhel-sst-security-selinux
    • ssg_security
    • 10
    • None
    • QE ack
    • False
    • Hide

      None

      Show
      None
    • No
    • Red Hat Enterprise Linux
    • CY24Q2
    • Hide

      The timedatectl command executed on a machine where the timemaster service is configured and used does not trigger any SELinux denials in enforcing mode.

      Show
      The timedatectl command executed on a machine where the timemaster service is configured and used does not trigger any SELinux denials in enforcing mode.
    • Pass
    • None
    • Unspecified Release Note Type - Unknown
    • All
    • None

      On a system using timemaster, run `timedatectl`

       

      # audit2allow -b
      #============= systemd_timedated_t ==============
      allow systemd_timedated_t timemaster_unit_file_t:service status;
      

       

      # rpm -q selinux-policy
      selinux-policy-38.1.23-1.el9_3.2.noarch

       

              rhn-support-zpytela Zdenek Pytela
              champtar Etienne Champetier (Inactive)
              Zdenek Pytela Zdenek Pytela
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: