On 9/15/26 08:02, Martin-Éric Racine wrote:
On Mon, 17 Aug 2026 16:32:38 +0300
=?UTF-8?Q?Martin=2D=C3=89ric_Racine?= <[email protected]>
wrote:
On Wed, 05 Aug 2026 02:55:59 -0400 Wesley Schwengle
<[email protected]> wrote:
Package: openntpd
Version: 1:7.9p1-3
Severity: important
X-Debbugs-Cc: [email protected]
Dear Maintainer,
I noticed my openntpd wasn't running anymore do to a clock skew error on
building i3 from source. It seems from version 7.9p1-3 and up the location of
the sock file changed from `/var/lib/openntpd/run/ntpd.sock` to
`/run/openntpd/ntpd.sock`. This causes apparmor issues:
Aug 05 02:44:05 sputnik-odin kernel: audit: type=1400
audit(1785912245.478:30553): apparmor="DENIED" operation="mknod" class="file"
profile="/usr/sbin/ntpd" name="/run/openntpd/ntpd.sock" pid=255478 comm="ntpd"
requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Aug 05 02:46:17 sputnik-odin kernel: audit: type=1400
audit(1785912377.102:30562): apparmor="DENIED" operation="mknod" class="file"
profile="/usr/sbin/ntpd" name="/var/lib/openntpd/ntpd.drift" pid=256003
comm="ntpd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
A downgrade to a stable package made it work and while bisecting I noticed the
first error on 1:7.9p1-3, it is also present on 7.9p1-4. Although I didn't test
the openntpd_1%3a6.8p1-6_amd64.deb, openntpd_1%3a6.8p1-5_amd64.deb packages.
To fix the glich I had to add `/run/openntpd/ntpd.sock rw,` to
`/etc/apparmor.d/usr.sbin.ntpd` and reload it with `apparmor_parser -r
/etc/apparmor.d/usr.sbin.ntpd` after which the problem got solved.
Sorry, where would you add this? We currently have:
/usr/sbin/ntpd mrix,
/var/lib/openntpd/ntpd.drift rw,
/run/openntpd/ntpd.sock rw,
Well?
If you think it is already there and there are no issues, I think the
bug can be closed. I probably was in some kind of edge case scenario. I duno
Cheerys,
Wesle
--
Wesley Schwengle
E: [email protected]
