Comment 3 for bug 1546455

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I see that ntp is now using AF_UNSPEC in a number of places. I tried the following rules:
  # ntp uses AF_INET, AF_INET6 and AF_UNSPEC
  network dgram,
  network stream,

which should fix it, but still get denials. I then tried all of the following:
  network udp,
  network tcp,
  network dgram,
  network stream,
  network inet,
  network inet6,
  network,

and the kernel is still denying.