Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:notes_apparmor [2026/06/07 19:12] – modification externe 127.0.0.1
+++ tech:notes_apparmor [2026/06/08 14:09] (Version actuelle) – Jean-Baptiste
@@ Ligne 9: / Ligne 9: @@
 The nscd Apparmor profile is not prepared for that and needs some additional
 capabilities added.
+`/etc/apparmor.d/openntpd`
+~~~
+# vim:syntax=apparmor
+#include <tunables/global>
+/usr/sbin/ntpd flags=(attach_disconnected) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+  # conf
+  /etc/openntpd/ntpd.conf r,
+  # capabilities
+  capability kill,
+  capability sys_chroot,
+  capability setgid,
+  capability setuid,
+  capability sys_time,
+  capability sys_nice,
+  /usr/sbin/ntpd mrix,
+  /var/lib/openntpd/db/ntpd.drift rw,
+  /var/lib/openntpd/run/ntpd.sock rw,
+}
+~~~
 Necessary changes are: