Project

General

Profile

Tâche #17431

Distribution EOLE - Scénario #17358: Correction à faire sur Seth avant la RC

ntp : problème apparmor sur /var/lib/samba/ntp_signd/socket

Added by Klaas TJEBBES almost 5 years ago. Updated almost 5 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
09/30/2016
Due date:
% Done:

100%

Estimated time:
1.00 h
Spent time:
Remaining (hours):
0.0

Description

2016-10-07T14:06:16.709544+02:00 dc1.ac-test.lan kernel: [76114.069187] audit: type=1400 audit(1475841976.705:258): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/var/lib/samba/ntp_signd/socket" pid=9529 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=108 ouid=0

History

#1 Updated by Scrum Master almost 5 years ago

  • Status changed from Nouveau to En cours

#2 Updated by Scrum Master almost 5 years ago

  • Description updated (diff)
  • Assigned To set to Daniel Dehennin

#3 Updated by Daniel Dehennin almost 5 years ago

  • Project changed from Distribution EOLE to eole-common
  • % Done changed from 0 to 100
  • Estimated time set to 1.00 h
  • Remaining (hours) set to 0.0

Ce message d’erreur apparaît avant instance car nous avons déjà un template pour gérer ce cas source:tmpl/ntpd.apparmor.conf@c55859e

#4 Updated by Daniel Dehennin almost 5 years ago

Sur un serveur démarré le 11 octobre 2016 à 15h59:

root@dc1:~# rgrep DENIED /var/log/rsyslog/local/kernel/
/var/log/rsyslog/local/kernel/kernel.notice.log:2016-10-10T19:29:33.203093+02:00 dc1.ac-test.lan kernel: [  100.881777] audit: type=1400 audit(1476120573.196:9): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/samba/winbindd/pipe" pid=3781 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

#5 Updated by Scrum Master almost 5 years ago

  • Status changed from En cours to Fermé

Also available in: Atom PDF