Ubuntu
gpsd package

  1. Bug #1872175
  2. Comment #17

Comment 17 for bug 1872175

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Overall rules to go with seems to be

 # required for pps initialization
 capability dac_read_search,
 capability sys_time,
 /sys/devices/virtual/pps/ r,
 # to submit data to chrony
 ptrace read peer=/usr/sbin/chronyd,
 # for libusb
 /sys/devices/**/usb[0-9]*/** r,
 # triggered on fusercount, not strictly required and unsafe to allow
 # adding a denial rule silences the warnings
 deny ptrace read peer=unconfined,