Public bug reported:
Jun 28 07:55:29 2013 ubuntu <daemon.err<27>> ntpd[2001]: can't open
/var/log/ntpstats/protostats.20130628: Permission denied
Jun 28 07:55:29 2013 ubuntu <kern.notice<5>> kernel: [136683.753956] type=1400
audit(1372402529.550:120): apparmor="DENIED" operation="mknod" parent=1
profile="/usr/sbin/ntpd" name="/var/log/ntpstats/protostats.20130628" pid=2001
comm="ntpd" requested_mask="c" denied_mask="c" fsuid=129 ouid=129
FIX:
vi /etc/apparmor.d/usr.sbin.ntpd
#add
/var/log/ntpstats/protostats* rwl,
# restart
apparmor_parser -r /etc/apparmor.d/usr.sbin.ntpd
DATA:
# lsb_release -rd
Description: Ubuntu 12.04.2 LTS
Release: 12.04
# apt-cache policy ntp
ntp:
Installed: 1:4.2.6.p3+dfsg-1ubuntu3.1
Candidate: 1:4.2.6.p3+dfsg-1ubuntu3.1
Version table:
*** 1:4.2.6.p3+dfsg-1ubuntu3.1 0
500 http://gb.archive.ubuntu.com/ubuntu/ precise-updates/main amd64
Packages
100 /var/lib/dpkg/status
1:4.2.6.p3+dfsg-1ubuntu3 0
500 http://gb.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
# apt-cache policy apparmor
apparmor:
Installed: 2.7.102-0ubuntu3.8
Candidate: 2.7.102-0ubuntu3.8
Version table:
*** 2.7.102-0ubuntu3.8 0
500 http://gb.archive.ubuntu.com/ubuntu/ precise-proposed/main amd64
Packages
100 /var/lib/dpkg/status
2.7.102-0ubuntu3.7 0
500 http://gb.archive.ubuntu.com/ubuntu/ precise-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64
Packages
2.7.102-0ubuntu3 0
500 http://gb.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
** Affects: ntp (Ubuntu)
Importance: Undecided
Status: New
** Tags: apparmour ntp ntpstats protostats
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ntp in Ubuntu.
https://bugs.launchpad.net/bugs/1195898
Title:
apparmour denies access to /var/log/ntpstats/protostats
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1195898/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
