Public bug reported:

need to add

~# cat /etc/apparmor.d/local/usr.sbin.ntpd 
/run/systemd/userdb/io.systemd.Machine wr,
/etc/ssl/openssl.cnf r,

otherwise you get

Sep  8 16:07:44 noc4 kernel: [ 1843.949193] audit: type=1400 
audit(1599599264.140:52): apparmor="DENIED" operation="connect" 
profile="/usr/sbin/ntpd" name="/run/systemd/userdb/io.systemd.Machine" 
pid=16851 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Sep  8 16:11:22 noc4 kernel: [ 2062.263356] audit: type=1400 
audit(1599599482.449:138): apparmor="DENIED" operation="open" 
profile="/usr/sbin/ntpd" name="/etc/ssl/openssl.cnf" pid=17639 comm="ntpd" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

** Affects: ntpsec (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1894902

Title:
  2 apparmor items missing for 'groovy'

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntpsec/+bug/1894902/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to