Bug 2232637

Summary: SELinux prevents the systemd-timesyncd process from watching the /run/systemd/ directory [rhel-9.2.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: selinux-policyAssignee: Nikola Knazekova <nknazeko>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: medium Docs Contact:
Priority: medium    
Version: CentOS StreamCC: bstinson, dpulkowski, jwboyer, lvrabec, mmalik, nknazeko, shalygin.k, travier, zpytela
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-38.1.11-2.el9_2.4 Doc Type: Bug Fix
Doc Text:
Cause: SELinux prevents the systemd-timesyncd process from watching the /run/systemd/ directory Consequence: This bug is preventing systemd-timedated from starting in OpenShift 4.13 installations that disable chronyd. Fix: Allow systemd-timedated watch init runtime dir Result: No SELinux denials
Story Points: ---
Clone Of: 2175137 Environment:
Last Closed: 2023-09-12 10:02:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2175137    
Bug Blocks:    

Comment 10 errata-xmlrpc 2023-09-12 10:02:49 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (selinux-policy bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:5062