Denial during cockpit use

node=localhost type=USER_AVC msg=audit(1702256090.674:226515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=n/a uid=0 gid=0 path="/usr/lib/systemd/system/chronyd.service" cmdline="/usr/lib/systemd/systemd-timedated" function="mac_selinux_filter" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:chronyd_unit_t:s0 tclass=service permissive=0 exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=?  terminal=?' UID="root" AUID="unset" AUID="root" UID="root" GID="root" SAUID="root"

Signed-off-by: Dave Sugar <[email protected]>

policy/modules/services/ntp.te

@@ -171,6 +171,7 @@ ifdef(`init_systemd',`
 	optional_policy(`
 		chronyd_enabledisable(ntpd_t)
 		chronyd_startstop(ntpd_t)
+		chronyd_status(ntpd_t)
 	')
 
 	optional_policy(`