~ubuntu-branches/ubuntu/lucid/ntp/lucid

# vim:syntax=apparmor

# Last Modified: Tue Aug 11 16:14:21 CDT 2009

# Updated for Ubuntu by: Jamie Strandboge <jamie@canonical.com>

# ------------------------------------------------------------------

#

#    Copyright (C) 2002-2005 Novell/SUSE

#

#    This program is free software; you can redistribute it and/or

#    modify it under the terms of version 2 of the GNU General Public

#    License published by the Free Software Foundation.

#

# ------------------------------------------------------------------

#include <tunables/global>

#include <tunables/ntpd>

/usr/sbin/ntpd {

  #include <abstractions/base>

  #include <abstractions/nameservice>

  #include <abstractions/user-tmp>

  capability ipc_lock,

  capability net_bind_service,

  capability setgid,

  capability setuid,

  capability sys_chroot,

  capability sys_resource,

  capability sys_time,

  network inet dgram,

  network inet stream,

  network inet6 stream,

  @{PROC}/net/if_inet6 r,

  @{PROC}/*/net/if_inet6 r,

  @{NTPD_DEVICE} r,

  /usr/sbin/ntpd rmix,

  /etc/ntp.conf r,

  /etc/ntp.conf.dhcp r,

  /etc/ntpd.conf r,

  /etc/ntpd.conf.tmp r,

  /var/lib/ntp/ntp.conf.dhcp r,

  /etc/ntp.keys r,

  /etc/ntp/** r,

  /etc/ntp.drift rwl,

  /etc/ntp.drift.TEMP rwl,

  /etc/ntp/drift* rwl,

  /var/lib/ntp/*drift rw,

  /var/lib/ntp/*drift.TEMP rw,

  /var/log/ntp w,

  /var/log/ntp.log w,

  /var/log/ntpd w,

  /var/log/ntpstats/loopstats* rwl,

  /var/log/ntpstats/peerstats* rwl,

  /var/run/ntpd.pid w,

}