Public bug reported:

If enabling rtc support:
/etc/chrony/chrony.conf:
#rtcsync
rtcfile /var/lib/chrony/rtc

And restarting chrony into that config
$ sudo systemctl restart chrony

It will fail to use that:
Feb 23 09:53:02 bionic-test chronyd[4216]: Could not open /etc/adjtime : No 
such file or directory
Feb 23 09:53:02 bionic-test chronyd[4216]: Could not open RTC device /dev/rtc : 
Permission denied

One is an apparmor Deny:
[ 5756.216096] audit: type=1400 audit(1519379582.153:21): apparmor="DENIED" 
operation="open" profile="/usr/sbin/chronyd" name="/dev/rtc0" pid=4216 
comm="chronyd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0

The access to /etc/adjtime would be ok if it exists.
I created it in my setup and it is good now.
But the apparmor profile needs to allow rtc.

** Affects: chrony (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1751241

Title:
  enabling RTC support is blocked by apparmor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chrony/+bug/1751241/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to