| Re: [chrony-users] chronyc serverstats => 501 not autorized |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: Gerd Hoerst <gerd@xxxxxxxxxx>
- Subject: Re: [chrony-users] chronyc serverstats => 501 not autorized
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Thu, 20 Nov 2025 08:28:35 +0100
- Cc: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1763623722; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=nLefs6/Mb6pEb/D8Z/F86+PYBA77PFUyHr3XhNiDOVE=; b=FeZMgMmqDbGl7jtBZUK21cHrMD6HXwKnC0M5YxdZdTz0up2xnueORkI0tw05aUqVwz1rTS VcWxoH2Fnz4YWiR8LluxehkRcg0Fu97CpTcnOFcjOGfPEMTmG5CxsZEX4EHEyETr+n8zWK iSgLx/VVuByRj9H5K7bp4Qa5OYZuzhg=
On Wed, Nov 19, 2025 at 05:21:55PM +0100, Gerd Hoerst wrote:
> Hi !
>
> So here again.... for 4.7 i made 2 traces because the option -u is not
> available there.
>
> Both on same machine with same system (ubuntu 24.04)
Ok, so with 4.7 there is:
> bind(3, {sa_family=AF_UNIX, sun_path="/run/chrony/chronyc.89798.sock"}, 33) = 0
> connect(3, {sa_family=AF_UNIX, sun_path="/run/chrony/chronyd.sock"}, 27) = 0
but with 4.8 it is:
> geteuid() = 0
> bind(5, {sa_family=AF_UNIX, sun_path="/run/chrony/chronyc.89002/pyyqvBK3cIONiIxh/sock"}, 50) = 0
> connect(5, {sa_family=AF_UNIX, sun_path="/run/chrony/chronyd.sock"}, 27) = -1 EACCES (Keine Berechtigung)
For some reason, the same connect() call is failing with 4.8.
geteuid() returning 0 confirms it's running as root. The difference in
the bind() call is expected, that's was one of the changes made in
4.8, but I'm not sure how could that impact the connect() call.
I still suspect an AppArmor issue. Where did you get the 4.8 package?
On https://launchpad.net/ubuntu/+source/chrony I see the latest
version that Ubuntu has is 4.7.
--
Miroslav Lichvar
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.