Description of problem: Here is an audit log: host=foo.example.com type=AVC msg=audit(1209091413.954:1286): avc: denied { sys_ptrace } for pid=28197 comm="gnome-clock-app" capability=19 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability host=foo.example.com type=AVC msg=audit(1209091413.954:1286): avc: denied { ptrace } for pid=28197 comm="gnome-clock-app" scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process host=foo.example.com type=SYSCALL msg=audit(1209091413.954:1286): arch=c000003e syscall=89 success=yes exit=25 a0=7fff2d0a3180 a1=7fff2d0a3290 a2=fff a3=7fff2d0a2f00 items=0 ppid=1 pid=28197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gnome-clock-app" exe="/usr/libexec/gnome-clock-applet-mechanism" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null) Version-Release number of selected component (if applicable): selinux-policy-targeted-3.3.1-35.fc9 How reproducible: always Steps to Reproduce: 1.Add any city to the gnome clock applet from the preference 2.click the applet and expand the city list 3.move the cursor to the city and click a set button Actual results: No timezone is changed and auditd reported the above error. Expected results: the timezone should be changed Additional info:
Hmm, I should check the translations before submitting.. s/city/location/
Fixed in selinux-policy-3.3.1-40.fc9