Hello,
for some (unclear) reason, ntpd reads the directory listings of
directories in $PATH (/bin/, /sbin, /usr/bin, ...).
Note that I have no idea why it does that - insights welcome ;-)
Also, ntpd seems to work without those permissions, so we might want
to change the added rule to "deny".
[ profiles-ntpd-path-dirlist.diff ]
=== modified file 'profiles/apparmor.d/usr.sbin.ntpd'
--- profiles/apparmor.d/usr.sbin.ntpd 2015-05-18 23:20:49 +0000
+++ profiles/apparmor.d/usr.sbin.ntpd 2015-08-25 12:02:18 +0000
@@ -37,6 +37,7 @@
/etc/ntpd.conf.tmp r,
/tmp/ntp* rwl,
+ /{usr/,usr/local/,}{s,}bin/ r,
/usr/sbin/ntpd rmix,
/var/lib/ntp/drift rwl,
/var/lib/ntp/drift.TEMP rwl,
Regards,
Christian Boltz
--
> Be aware that a s390x / and most ppc64 are not a smart phones
> nor net books.
They just don't fit into the pocket. :)
[> Dr. Werner Fink and Kay Sievers in opensuse-factory]
--
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
