Comment 3 for bug 559628

Revision history for this message
Jamie Strandboge (jdstrand) wrote : Re: yust another apparmor-message

I'll mark this as Triaged, but I'm thinking that the profile is doing its job. From the ld.so man page:

/etc/ld.so.preload: File containing a whitespace separated list of ELF shared libraries to be loaded before the program. libraries and an ordered list of candidate libraries.

IMO, if the administrator wants to use /etc/ld.so.preload, then he/she should update the profile accordingly. This makes sense too because if the administrator updated /etc/ld.so.preload, there is a good chance the profile would have to be updated to allow access to the preload libraries anyway (ie simply adding this to the profile doesn't really 'fix' it).

Michael, if you want access to /etc/ld.so.preload (keeping in mind you may need to make other changes), please add to /etc/apparmor.d/usr.sbin.ntpd:
  /etc/ld.so.preload r,

then perform:
$ sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.ntpd