NTP Apparmor configuration denies access to clockstats

Bug #701896 reported by David Tulloh on 2011-01-12
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ntp (Ubuntu)
Low
Jamie Strandboge

Bug Description

Binary package hint: ntp

Ubuntu 10.04.1 LTS
ntp 1:4.2.4p8+dfsg-1ubuntu2

I enabled the statsdir line in the NTP config file triggering the generation of loopstats, peerstats and clockstats.
Unfortunately the clockstats file creation was blocked by AppArmor.

The loopstats and peerstats permissions were fine. I fixed the clockstats problem by duplicating the peerstats line and modifying it appropriately.

58a59
> /var/log/ntpstats/clockstats* rwl,

apport output is attached and includes full AppArmor and NTP config files.

David Tulloh (david-tulloh-aad) wrote :
Changed in ntp (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
assignee: nobody → Jamie Strandboge (jdstrand)
status: Confirmed → Triaged
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package ntp - 1:4.2.6.p2+dfsg-1ubuntu3

---------------
ntp (1:4.2.6.p2+dfsg-1ubuntu3) natty; urgency=low

  * debian/apparmor-profile: allow access to clockstats too (LP: #701896)
 -- Jamie Strandboge <email address hidden> Wed, 12 Jan 2011 10:05:41 -0600

Changed in ntp (Ubuntu):
status: Triaged → Fix Released
Eric Towers (fuzzyeric) wrote :

filegen can generate the following files that do not appear to be permitted by AppArmor (based solely on the above dialog): cryptostats, protostats, rawstats, sysstats, and timingstats. (See ntp-doc, Monitoring Commands.)

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers