Dec 17 19:50:34 silver kernel: audit(1166406634.351:4): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.379:5): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.403:6): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.427:7): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.487:8): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.515:9): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.547:10): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext =system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file
restorecon /etc/localtime The current policy should prevent this from happening in the future, since /usr/sbin/tzdata-update now has policy that says if it creates a file in etc_t create it as localtime_t
Should be fixed in the current release