On Sun, 23 Jan 2005 21:22:57 +1000, Michael D. Setzer II
<mikes@xxxxxxxxxxxxxxxx> wrote:
> Had to shut the machine down three times to be able to catch the
> whole error message, since it will not pause.
>
> Shutting down ntpd: audit(1106478493.061:0): avc: denied {write}
> for pid=2935 exe=/usr/sbin/ntpd name=log dev=tmpfs ino=5739
> scontext=user_u:system_r:ntpd_t tcontext=user_u:object_r:
> device_t tclass=sock_file
>
This is an audit error caused by SELinux.
Try this as root:
restorecon /usr/sbin/ntpd
Then try to do the shutdown again... and you may not have to do the
WHOLE shutdown, you can try to log in as root and then do "service
ntpd stop" which is what it does when you are doing a shutdown. There
are other subtle differences, so you could try it either way.
