[apparmor] [Bug 749727] Re: ntpd daemon request capability "dac_override"

[c]

** Attachment added: "apparmor profile"
   https://bugs.launchpad.net/apparmor/+bug/749727/+attachment/1974715/+files/usr.sbin.ntpd

** Also affects: ntp
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/749727

Title:
  ntpd daemon request capability "dac_override"

Status in AppArmor Linux application security framework:
  New
Status in NTP:
  New

Bug description:
  Environment: Ubuntu Desktop x64 10.10

  The following message is observed in syslog

  Apr  3 17:47:22 universe kernel: [   20.235357] type=1400
  audit(1301824042.778:24): apparmor="DENIED" operation="capable"
  parent=1 profile="/usr/sbin/ntpd" pid=1459 comm="ntpd" capability=1
  capname="dac_override"

  either apparmor security profile is too restrictive or daemon "ntpd"
  has bug