NTP Apparmor configuration denies access to clockstats

Bug #701896 reported by David Tulloh
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ntp (Ubuntu)
Jamie Strandboge

Bug Description

Binary package hint: ntp

Ubuntu 10.04.1 LTS
ntp 1:4.2.4p8+dfsg-1ubuntu2

I enabled the statsdir line in the NTP config file triggering the generation of loopstats, peerstats and clockstats.
Unfortunately the clockstats file creation was blocked by AppArmor.

The loopstats and peerstats permissions were fine. I fixed the clockstats problem by duplicating the peerstats line and modifying it appropriately.

> /var/log/ntpstats/clockstats* rwl,

apport output is attached and includes full AppArmor and NTP config files.

Revision history for this message
David Tulloh (david-tulloh-aad) wrote :
Changed in ntp (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
assignee: nobody → Jamie Strandboge (jdstrand)
status: Confirmed → Triaged
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package ntp - 1:4.2.6.p2+dfsg-1ubuntu3

ntp (1:4.2.6.p2+dfsg-1ubuntu3) natty; urgency=low

  * debian/apparmor-profile: allow access to clockstats too (LP: #701896)
 -- Jamie Strandboge <email address hidden> Wed, 12 Jan 2011 10:05:41 -0600

Changed in ntp (Ubuntu):
status: Triaged → Fix Released
Revision history for this message
Eric Towers (fuzzyeric) wrote :

filegen can generate the following files that do not appear to be permitted by AppArmor (based solely on the above dialog): cryptostats, protostats, rawstats, sysstats, and timingstats. (See ntp-doc, Monitoring Commands.)

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers