Bug 720938 – acct-user/ntp: /dev/null as HOME prevents net-misc/openntpd startup

• Product: Gentoo Linux
• Status: RESOLVED OBSOLETE

[Description Alarig Le Lay 2020-05-04 13:12:48 UTC]

Hi,

acct-user/ntp changed the HOME of the ntp user
May  4 14:04:08 alarig usermod[3723]: change user 'ntp' home from '/var/lib/openntpd/chroot' to '/dev/null'

But the service crashes if I restart it
May  4 14:04:11 alarig ntpd[3752]: ntp: bad privsep dir /dev/null permissions: 20666
May  4 14:04:11 alarig ntpd[3751]: Lost child: child exited
May  4 14:04:11 alarig ntpd[3751]: Terminating
May  4 14:04:11 alarig ntpd[3754]: dispatch_imsg in main: pipe closed


If I set it back to the old value, it works
alarig ~ # rc-service ntpd status
 * status: crashed
alarig ~ # usermod -d "/var/lib/openntpd/chroot" "ntp"
alarig ~ # rc-service ntpd restart
 * Stopping OpenNTPD ...
 * start-stop-daemon: no matching processes found                    [ ok ]
 * Starting OpenNTPD ...                                             [ ok ]
alarig ~ # rc-service ntpd status
 * status: started

It looks like https://bugs.gentoo.org/693050 but this bug was closed as resolved. Also, acct-user/openntpd wasn’t pulled by emerge during the upgrade.

~ % equery uses net-misc/ntp
[ Legend : U - final flag setting for installation]
[        : I - package is installed with flag     ]
[ Colors : set, unset                             ]
 * Found these USE flags for net-misc/ntp-4.2.8_p14-r2:
 U I
 - - caps         : Use Linux capabilities library to control privilege
 - - debug        : Enable extra debug codepaths, like asserts and extra output. If you want to get meaningful
                    backtraces see https://wiki.gentoo.org/wiki/Project:Quality_Assurance/Backtraces
 + + ipv6         : Add support for IP version 6
 - - libressl     : Use dev-libs/libressl instead of dev-libs/openssl when applicable (see also the ssl useflag)
 + + openntpd     : Allow ntp to be installed alongside openntpd
 - - parse-clocks : Add support for PARSE clocks
 + + readline     : Enable support for libreadline, a GNU line-editing library that almost everyone wants
 - - samba        : Provide support for Samba's signing daemon (needed for Active Directory domain controllers)
 - - snmp         : Add support for the Simple Network Management Protocol if available
 + + ssl          : Add support for SSL/TLS connections (Secure Socket Layer / Transport Layer Security)
 + + threads      : Add threads support for various packages. Usually pthreads
 + + vim-syntax   : Pulls in related vim syntax scripts
 - - zeroconf     : Support for DNS Service Discovery (DNS-SD)
~ % equery uses net-misc/openntpd
[ Legend : U - final flag setting for installation]
[        : I - package is installed with flag     ]
[ Colors : set, unset                             ]
 * Found these USE flags for net-misc/openntpd-6.0_p1:
 U I
 - - libressl : Enable HTTPS TLS time constraint support using dev-libs/libressl

[Comment 1 Mike Gilbert 2020-05-04 14:37:04 UTC]

You need to upgrade to net-misc/openntpd-6.2_p3-r1, or remove the acct-user/ntp package and reset the home directory.

Also see bug 720674.

[Comment 2 Alarig Le Lay 2020-05-04 19:16:14 UTC]

It works with net-misc/openntpd-6.2_p3-r1, thanks!