Public bug reported: need to add
~# cat /etc/apparmor.d/local/usr.sbin.ntpd /run/systemd/userdb/io.systemd.Machine wr, /etc/ssl/openssl.cnf r, otherwise you get Sep 8 16:07:44 noc4 kernel: [ 1843.949193] audit: type=1400 audit(1599599264.140:52): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/systemd/userdb/io.systemd.Machine" pid=16851 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 Sep 8 16:11:22 noc4 kernel: [ 2062.263356] audit: type=1400 audit(1599599482.449:138): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/etc/ssl/openssl.cnf" pid=17639 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 ** Affects: ntpsec (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1894902 Title: 2 apparmor items missing for 'groovy' To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ntpsec/+bug/1894902/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs