Hi Louis,

So According to the information gleaned in #928168¹, adding a rule to allow read access to winbindd pipe doesn’t seem necessary‽ As far as I can see from my local tests, only read/write access to /var/lib/samba/ntp_signd/socket is needed. Could you please confirm?

If so, chronyd’s Apparmor profile should just include (for samba ofc):
/var/lib/samba/ntp_signd/socket rw,

Cheers,
Vincent


¹ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928168

Attachment: signature.asc
Description: PGP signature

Reply via email to