On 1/19/21 6:09 PM, Diederik de Haas wrote:
Thanks for your report! I've uploaded a new version which includes the openssl abstraction and thus fixes this.# journalctl -kaf --no-hostname | grep -w 'apparmor="DENIED"' jan 20 00:45:32 kernel: audit: type=1400 audit(1611099932.689:41): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/etc/ssl/openssl.cnf" pid=43157 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
-- Richard