On Mon, 17 Aug 2026 16:32:38 +0300 =?UTF-8?Q?Martin=2D=C3=89ric_Racine?= <[email protected]> wrote: > On Wed, 05 Aug 2026 02:55:59 -0400 Wesley Schwengle > <[email protected]> wrote: > > Package: openntpd > > Version: 1:7.9p1-3 > > Severity: important > > X-Debbugs-Cc: [email protected] > > > > Dear Maintainer, > > > > I noticed my openntpd wasn't running anymore do to a clock skew error on > > building i3 from source. It seems from version 7.9p1-3 and up the location > > of > > the sock file changed from `/var/lib/openntpd/run/ntpd.sock` to > > `/run/openntpd/ntpd.sock`. This causes apparmor issues: > > > > Aug 05 02:44:05 sputnik-odin kernel: audit: type=1400 > > audit(1785912245.478:30553): apparmor="DENIED" operation="mknod" > > class="file" > > profile="/usr/sbin/ntpd" name="/run/openntpd/ntpd.sock" pid=255478 > > comm="ntpd" > > requested_mask="c" denied_mask="c" fsuid=0 ouid=0 > > > > Aug 05 02:46:17 sputnik-odin kernel: audit: type=1400 > > audit(1785912377.102:30562): apparmor="DENIED" operation="mknod" > > class="file" > > profile="/usr/sbin/ntpd" name="/var/lib/openntpd/ntpd.drift" pid=256003 > > comm="ntpd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 > > > > A downgrade to a stable package made it work and while bisecting I noticed > > the > > first error on 1:7.9p1-3, it is also present on 7.9p1-4. Although I didn't > > test > > the openntpd_1%3a6.8p1-6_amd64.deb, openntpd_1%3a6.8p1-5_amd64.deb packages. > > > > To fix the glich I had to add `/run/openntpd/ntpd.sock rw,` to > > `/etc/apparmor.d/usr.sbin.ntpd` and reload it with `apparmor_parser -r > > /etc/apparmor.d/usr.sbin.ntpd` after which the problem got solved. > > Sorry, where would you add this? We currently have: > > /usr/sbin/ntpd mrix, > /var/lib/openntpd/ntpd.drift rw, > /run/openntpd/ntpd.sock rw,
Well? Martin-Éric
