Sid Boyce wrote: > type=APPARMOR msg=audit(1159712726.582:6): REJECTING r access to > /proc/net/if_inet6 (ntpd(3687) profile /usr/sbin/ntpd active > /usr/sbin/ntpd) type=APPARMOR msg=audit(1159713575.608:7): REJECTING m > access to /etc/ld.so.cache (netstat(4724) profile /bin/netstat active > /bin/netstat) type=APPARMOR msg=audit(1159755718.633:8): REJECTING m > access to /etc/ld.so.cache (netstat(801) profile /bin/netstat active > /bin/netstat) type=APPARMOR msg=audit(1159802849.507:9): REJECTING m > access to /etc/ld.so.cache (netstat(6917) profile /bin/netstat active > /bin/netstat) > > OK, I'm running a vanilla kernel without apparmor, selinux enabled and > the apparmor panel says apparmor is disabled, so it's puzzling. At one > stage I did look around for apparmor patches, but none could be found.
Well, it seems to me that apparmor is still getting in your way - although the messages you quoted are not the ones related to NTP not being able to drop root priviledges. For starters I would try what Chad Groneman suggested - "complain <ntp-binary>". Then you'll see "PERMITTING" messages in the audit.log and your NTP should work. /Per Jessen, Zürich --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
