[pkg-ntp-maintainers] Bug#883949: ntp: no info how to fix the access to a local DCF clock blocked by apparmor

[Peter Marschall]

Package: ntp
Version: 1:4.2.8p10+dfsg-5
Severity: normal

Hi,

with one of the recent updates ntp lost acess to my local DCF clock.

It took me quite a while to find out that the correct may to regain
access to the device was to set
	@{NTPD_DEVICE}="/dev/ttyUSB[0-9]*"
in
	/etc/apparmor.d/tunables/ntpd

Please be so kind to mention the above file and the tunable NTPD_DEVICE
in README.Debian or NEWS.Debian to help people like me with local clocks.

When I googled the issue, the most prominent results were to disable any
SElinux / apparmor. And this is definitely the worst option ;-)

Thanks for maintaining ntp in Debian
Peter


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ntp depends on:
ii  adduser              3.116
ii  dpkg                 1.19.0.4
ii  init-system-helpers  1.51
ii  libc6                2.25-3
ii  libcap2              1:2.25-1.2
ii  libedit2             3.1-20170329-1
ii  libopts25            1:5.18.12-3
ii  libssl1.1            1.1.0g-2
ii  lsb-base             9.20170808
ii  netbase              5.4
ii  tzdata               2017c-1

Versions of packages ntp recommends:
ii  perl  5.26.1-3
pn  sntp  <none>

Versions of packages ntp suggests:
ii  ntp-doc  1:4.2.8p10+dfsg-5

-- Configuration Files:
/etc/apparmor.d/tunables/ntpd changed:
@{NTPD_DEVICE}="/dev/ttyUSB[0-9]*"

-- no debconf information