Mailinglist Archive: opensuse-factory (592 mails)

< Previous Next >
Re: [opensuse-factory] ntp problems
  • From: Sid Boyce <sboyce@xxxxxxxxxxxxxxxx>
  • Date: Sat, 14 Oct 2006 00:54:47 +0100
  • Message-id: <45302747.7050208@xxxxxxxxxxxxxxxx>
Per Jessen wrote:
Sid Boyce wrote:

type=APPARMOR msg=audit(1159712726.582:6): REJECTING r access to
/proc/net/if_inet6 (ntpd(3687) profile /usr/sbin/ntpd active
/usr/sbin/ntpd) type=APPARMOR msg=audit(1159713575.608:7): REJECTING m
access to /etc/ (netstat(4724) profile /bin/netstat active
/bin/netstat) type=APPARMOR msg=audit(1159755718.633:8): REJECTING m
access to /etc/ (netstat(801) profile /bin/netstat active
/bin/netstat) type=APPARMOR msg=audit(1159802849.507:9): REJECTING m
access to /etc/ (netstat(6917) profile /bin/netstat active

OK, I'm running a vanilla kernel without apparmor, selinux enabled and
the apparmor panel says apparmor is disabled, so it's puzzling. At one
stage I did look around for apparmor patches, but none could be found.

Well, it seems to me that apparmor is still getting in your way -
although the messages you quoted are not the ones related to NTP not
being able to drop root priviledges.
For starters I would try what Chad Groneman suggested - "complain
<ntp-binary>". Then you'll see "PERMITTING" messages in the audit.log
and your NTP should work.
Since I did "/etc/init.d/boot.apparmor stop" and I now have it disabled at boot time I haven't had any messages in audit.log, however, the problem is still there. "rcntp start" or restart will cause the time to be set, thereafter, it drifts badly until a further restart or reboot.
Tried running ntp non-chroot, no change.
On another 10.2Alpha4 box running SUSE kernel 2.6.18-rc5-git6-2-default, there isn't a problem, so there seems to be a different behaviour with vanilla kernels.
Sid Boyce ... Hamradio License G3VBV, Licensed Private Pilot
Emeritus IBM/Amdahl Mainframes and Sun/Fujitsu Servers Tech Support Specialist, Cricket Coach
Microsoft Windows Free Zone - Linux used for all Computing Tasks

To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx

< Previous Next >