On Wed, 05 Aug 2026 02:55:59 -0400 Wesley Schwengle <[email protected]> wrote: > Package: openntpd > Version: 1:7.9p1-3 > Severity: important > X-Debbugs-Cc: [email protected] > > Dear Maintainer, > > I noticed my openntpd wasn't running anymore do to a clock skew error on > building i3 from source. It seems from version 7.9p1-3 and up the location of > the sock file changed from `/var/lib/openntpd/run/ntpd.sock` to > `/run/openntpd/ntpd.sock`. This causes apparmor issues: > > Aug 05 02:44:05 sputnik-odin kernel: audit: type=1400 > audit(1785912245.478:30553): apparmor="DENIED" operation="mknod" class="file" > profile="/usr/sbin/ntpd" name="/run/openntpd/ntpd.sock" pid=255478 comm="ntpd" > requested_mask="c" denied_mask="c" fsuid=0 ouid=0 > > Aug 05 02:46:17 sputnik-odin kernel: audit: type=1400 > audit(1785912377.102:30562): apparmor="DENIED" operation="mknod" class="file" > profile="/usr/sbin/ntpd" name="/var/lib/openntpd/ntpd.drift" pid=256003 > comm="ntpd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 > > A downgrade to a stable package made it work and while bisecting I noticed the > first error on 1:7.9p1-3, it is also present on 7.9p1-4. Although I didn't > test > the openntpd_1%3a6.8p1-6_amd64.deb, openntpd_1%3a6.8p1-5_amd64.deb packages. > > To fix the glich I had to add `/run/openntpd/ntpd.sock rw,` to > `/etc/apparmor.d/usr.sbin.ntpd` and reload it with `apparmor_parser -r > /etc/apparmor.d/usr.sbin.ntpd` after which the problem got solved.
Sorry, where would you add this? We currently have: /usr/sbin/ntpd mrix, /var/lib/openntpd/ntpd.drift rw, /run/openntpd/ntpd.sock rw, Martin-Éric
