Description of problem:
SELinux is preventing /bin/systemctl from search access on the directory 1.

Version-Release number of selected component (if applicable):

Fedora 15 alpha

How reproducible:
Unknown.

Steps to Reproduce:
1. Fresh install of Fedora 15 alpha with ntpd turned off.
2. Complete update of Fedora 15 alpha to latest packages.
3. Turn ntpd synchronization on via the Date and Time applet on the Gnome Desktop.
  
Actual results:
SELinux alert.

Expected results:
No SELinux alert.

Additional info:
SELinux is preventing /bin/systemctl from search access on the directory 1.

*****  Plugin catchall (100. confidence) suggests  ***************************

If you believe that systemctl should be allowed search access on the 1 directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep systemctl /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Context                system_u:system_r:init_t:s0
Target Objects                1 [ dir ]
Source                        systemctl
Source Path                   /bin/systemctl
Port                          <Unknown>
Host                          greene.memorial-anesthesia.org
Source RPM Packages           systemd-units-24-1.fc15
Target RPM Packages           
Policy RPM                    selinux-policy-3.9.16-13.fc15
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     greene.memorial-anesthesia.org
Platform                      Linux greene.memorial-anesthesia.org
                              2.6.38.2-9.fc15.x86_64 #1 SMP Wed Mar 30 16:55:57
                              UTC 2011 x86_64 x86_64
Alert Count                   1
First Seen                    Mon 11 Apr 2011 05:22:53 AM PDT
Last Seen                     Mon 11 Apr 2011 05:22:53 AM PDT
Local ID                      90e2985e-4eb3-4ac0-b4d0-356ce471e13d

Raw Audit Messages
type=AVC msg=audit(1302524573.836:51): avc:  denied  { search } for  pid=2034 comm="systemctl" name="1" dev=proc ino=7439 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=dir


type=SYSCALL msg=audit(1302524573.836:51): arch=x86_64 syscall=stat success=no exit=EACCES a0=41f7bc a1=7fffed02dba0 a2=7fffed02dba0 a3=7fffed02d920 items=0 ppid=1967 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=systemctl exe=/bin/systemctl subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)

Hash: systemctl,gnomeclock_t,init_t,dir,search

audit2allow

#============= gnomeclock_t ==============
allow gnomeclock_t init_t:dir search;

audit2allow -R

#============= gnomeclock_t ==============
allow gnomeclock_t init_t:dir search;