Hi Andrew,

On Fri, 2 May 2008, Andrew Elwell wrote:

> Hi folks,
>
> does anyone have the magic incantation to hand (apart from 'setenforce 
> permissive') to stop ntpd being blocked from writing to the driftfile etc. On 
> our enforcing machines we see large fluctuations in NTP stability

unless you are willing to modify the policy (which is rather painful on 
SL4), you probably want to "setsebool -P ntpd_disable_trans 1". Ntpd will 
run in the initrc_t domain after the next restart, which should be 
sufficient on SL4.

Hope this helps,
 	Stephan

-- 
Stephan Wiesand
   DESY - DV -
   Platanenallee 6
   15738 Zeuthen, Germany