Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

apparmor chronyd profile is broken #25572

Closed
paper42 opened this issue Oct 13, 2020 · 2 comments
Closed

apparmor chronyd profile is broken #25572

paper42 opened this issue Oct 13, 2020 · 2 comments

Comments

@paper42
Copy link
Member

paper42 commented Oct 13, 2020

System

  • xuname:
    Void 5.8.14_1 x86_64 GenuineIntel notuptodate hold rrrmDDDDDDDDDDDDDFFFFFFFFFFFFFFFFFF
  • package:
    *chrony-4.0_1

Expected behavior

%: sudo chronyd -n -u chrony

Actual behavior

%: sudo chronyd -n -u chrony
Fatal error : Could not open /var/run/chrony/chronyd.pid : Permission denied

Steps to reproduce the behavior

  • install and setup apparmor
  • enforce chronyd rule - aa-enforce chronyd
  • sv stop chronyd
  • sudo chronyd -n -u chrony
@CameronNemo
Copy link
Contributor

AFAICT we do not ship an AppArmor profile for chronyd.

  • xlocate '^/etc/apparmor.d/.*chrony.*'
  • grep -ri chrony srcpkgs/apparmor/ in void-packages
  • checked the chrony package for any apparmor profiles
  • find . -name '*chrony*' in the upstream AppArmor repository

@paper42
Copy link
Member Author

paper42 commented Oct 15, 2020

huh? I would have sworn that I didn't download it from an external source, but it seems like that's the case, sorry

@paper42 paper42 closed this as completed Oct 15, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants