Description of problem: The sntp program from the ntp package is a replacement for ntpdate, but it's not confined. Changing its context to ntpdate_exec_t doesn't seem to break it. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.10.0-159.fc17.noarch
Is it just binary replacement? Or are there new paths for lib/log/run files?
It's not a drop-in replacement for ntpdate, but their functionality is very similar. The only differences I see now is that sntp doesn't use libcap and it writes to /var/lib/sntp-kod.
commit 23a53aa57d7494b8b652e0712ef51c9b79e039ae Author: Miroslav Grepl <mgrepl> Date: Fri Dec 7 09:30:04 2012 +0100 Add sntp support to ntp policy
selinux-policy-3.10.0-165.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-165.fc17
Package selinux-policy-3.10.0-165.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-165.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-3.10.0-165.fc17 then log in and leave karma (feedback).
Package selinux-policy-3.10.0-166.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-166.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-3.10.0-166.fc17 then log in and leave karma (feedback).
selinux-policy-3.10.0-166.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.