From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14 Description of problem: Summary: SELinux is preventing gnome-clock-app (gnomeclock_t) "sys_ptrace" to <Unknown> (gnomeclock_t). Detailed Description: SELinux denied access requested by gnome-clock-app. It is not expected that this access is required by gnome-clock-app and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 Target Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 Target Objects None [ capability ] Source gnome-clock-app Source Path /usr/libexec/gnome-clock-applet-mechanism Port <Unknown> Host xxxxxxxxx Source RPM Packages gnome-panel-2.22.1.2-3.fc9 Target RPM Packages Policy RPM selinux-policy-3.3.1-35.fc9 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name xxxxxxxxx Platform Linux xxxxxxxxx 2.6.25-1.fc9.i686 #1 SMP Thu Apr 17 01:47:10 EDT 2008 i686 i686 Alert Count 3 First Seen Tue 22 Apr 2008 10:49:02 AM MDT Last Seen Tue 22 Apr 2008 08:55:27 AM MDT Local ID d3af18f1-49ad-44fb-abc0-b21425b58e2b Line Numbers Raw Audit Messages host=xxxxxxxxx type=AVC msg=audit(1208876127.917:75): avc: denied { sys_ptrace } for pid=9741 comm="gnome-clock-app" capability=19 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability host=xxxxxxxxx type=SYSCALL msg=audit(1208876127.917:75): arch=40000003 syscall=85 success=no exit=-13 a0=bff8a398 a1=bff8a478 a2=fff a3=bff8a398 items=0 ppid=1 pid=9741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gnome-clock-app" exe="/usr/libexec/gnome-clock-applet-mechanism" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null) Version-Release number of selected component (if applicable): gnome-panel-2.22.1.2-3.fc9 selinux-policy-3.3.1-35.fc9 How reproducible: Always Steps to Reproduce: Right-click on gnome-panel clock -> Adjust Date/Time -> Set System Time Actual Results: Expected Results: Additional info:
Fixed in selinux-policy-3.3.1-38.fc9