Also perhaps relevant is that the latest audit package in Fedora 24 even has:
~]# cat /usr/share/doc/audit/rules/22-ignore-chrony.rules > ## This rule suppresses the time-change event when chrony does time updates > -a never,exit -F arch=b64 -S adjtimex -F auid=unset -Fuid=chrony -F > subj_type=chronyd_t > -a never,exit -F arch=b32 -S adjtimex -F auid=unset -Fuid=chrony -F > subj_type=chronyd_t >
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
