error: kernel: audit: avc: denied { write }

Stephen Smalley sds at
Tue Feb 1 18:27:14 UTC 2005

On Tue, 2005-02-01 at 09:45, Roger Skildum wrote:
> I am running FC3 with a vanilla 2.6.10 kernel patched for Win4lin.  I am 
> not sure what has happened but all of a sudden I started getting a whole 
> slew of the errors listed below each time I boot. 
> Jan 30 05:18:48 host kernel: audit(1107080328.663:0): avc:  denied  { 
> write } for  pid=3575 exe=/usr/sbin/ntpd name=log dev=tmpfs ino=6673 
> scontext=user_u:system_r:ntpd_t tcontext=user_u:object_r:device_t 
> tclass=sock_file

What does /sbin/restorecon -v /dev/log show?

Stephen Smalley <sds at>
National Security Agency

More information about the fedora-selinux-list mailing list