Mailinglist Archive: opensuse-factory (592 mails)

< Previous Next >
Re: [opensuse-factory] ntp problems
  • From: Per Jessen <per@xxxxxxxxxxxx>
  • Date: Fri, 13 Oct 2006 08:46:32 +0200
  • Message-id: <egnco8$6o5$3@xxxxxxxxxxxxxxxx>
Sid Boyce wrote:

> type=APPARMOR msg=audit(1159712726.582:6): REJECTING r access to
> /proc/net/if_inet6 (ntpd(3687) profile /usr/sbin/ntpd active
> /usr/sbin/ntpd) type=APPARMOR msg=audit(1159713575.608:7): REJECTING m
> access to /etc/ld.so.cache (netstat(4724) profile /bin/netstat active
> /bin/netstat) type=APPARMOR msg=audit(1159755718.633:8): REJECTING m
> access to /etc/ld.so.cache (netstat(801) profile /bin/netstat active
> /bin/netstat) type=APPARMOR msg=audit(1159802849.507:9): REJECTING m
> access to /etc/ld.so.cache (netstat(6917) profile /bin/netstat active
> /bin/netstat)
>
> OK, I'm running a vanilla kernel without apparmor, selinux enabled and
> the apparmor panel says apparmor is disabled, so it's puzzling. At one
> stage I did look around for apparmor patches, but none could be found.

Well, it seems to me that apparmor is still getting in your way -
although the messages you quoted are not the ones related to NTP not
being able to drop root priviledges.

For starters I would try what Chad Groneman suggested - "complain
<ntp-binary>". Then you'll see "PERMITTING" messages in the audit.log
and your NTP should work.


/Per Jessen, Z├╝rich

---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx

< Previous Next >