ioerror / tlsdate

secure parasitic rdate replacement
Other
363 stars 74 forks source link

Ubuntu AppArmor error #168

Open yawnbox opened 9 years ago

yawnbox commented 9 years ago

platform: Ubuntu 14.10 desktop x64 related apps installed: apparmor, apparmor-docs, apparmor-notify, apparmor-profiles, apparmor-utils

run: sudo tlsdate -V

The output in the terminal appears correct (it displays the time), but an apparmor notification displays instructing to review the log.

/var/log/kern.log output:

Jan 1 14:24:45 ubuntu kernel: [11260.453936] audit: type=1400 audit(1420151085.167:81): apparmor="DENIED" operation="open" profile="/usr/bin/tlsdate" name="/usr/share/zoneinfo/America/Los_Angeles" pid=7278 comm="tlsdate-helper" requested_mask="r" denied_mask="r" fsuid=65534 ouid=0 Jan 1 14:24:46 ubuntu kernel: [11260.647266] audit: type=1400 audit(1420151085.363:82): apparmor="DENIED" operation="open" profile="/usr/bin/tlsdate" name="/usr/share/zoneinfo/America/Los_Angeles" pid=7277 comm="tlsdate-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

unixninja92 commented 9 years ago

I am having the same issue on Ubuntu 14.04.1 server x64 (same packages)

hostmaster commented 9 years ago

please have a look at my pull request https://github.com/ioerror/tlsdate/pull/170

is /etc/localtime a symlink on your server ?

unixninja92 commented 9 years ago

It's not a symlink for me.

gripedthumbtacks commented 9 years ago

I can also confirm this is an issue on Ubuntu.