Hai Vincent, Yes, that is correct.
/var/lib/samba/ntp_signd/socket rw, Is sufficient. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Vincent Blut [mailto:vincent.deb...@free.fr] > Verzonden: dinsdag 14 mei 2019 15:54 > Aan: Louis van Belle; 928...@bugs.debian.org > CC: Debian Bug Tracking System > Onderwerp: Re: Bug#928170: chrony: Apparmor profile contains > wrong path for samba sntp > > Hi Louis, > > So According to the information gleaned in #928168¹, adding a rule to > allow read access to winbindd pipe doesn’t seem necessary‽ > As far as I can see from my local tests, only read/write access to > /var/lib/samba/ntp_signd/socket is needed. Could you please confirm? > > If so, chronyd’s Apparmor profile should just include (for samba ofc): > /var/lib/samba/ntp_signd/socket rw, > > Cheers, > Vincent > > > ¹ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928168 >
