[pkg-apparmor] Bug#1153502: apparmor: tunables/ntpd shouldn't default to allowing /dev/tty10

Adrian Bunk bunk at debian.org
Mon Nov 9 08:42:18 GMT 2026


Package: apparmor
Version: 5.0.1-1
Severity: important
Tags: security
X-Debbugs-Cc: intrigeri <intrigeri at debian.org>

While looking at #1152599, I noticed the following:

ntpsec:
@{NTPD_DEVICE}="/dev/null"

apparmor:
@{NTPD_DEVICE}="/dev/tty10"


/dev/tty10 might be an existing device unrelated to ntp,
/dev/null is a better default here.



More information about the pkg-apparmor-team mailing list