Date: Wed, 28 Oct 2015 11:38:52 +0000 From: Matthew Seaman <matthew@freebsd.org> To: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:25.ntp Message-ID: <5630B3CC.2060505@freebsd.org> In-Reply-To: <201510272251.t9RMpAP6080322@sgt.com> References: <201510261236.t9QCa2cm044240@think.nginx.com> <201510272251.t9RMpAP6080322@sgt.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--NjTDsHeA1gXcMEHGXJdtMwJsW7lHvnw0q
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
On 10/27/15 22:51, Robert Sargent via freebsd-security wrote:
> there is a simple workaround if you don't want to or can't reboot your =
machines: install the ntp pkg=20
>=20
> pkg install ntp
>=20
> and add the following line to /etc/rc.conf =20
>=20
> ntpd_program=3D"/usr/local/sbin/ntpd"
>=20
> then kill the original /usr/sbin/ntpd process and run this command:
>=20
> /etc/rc.d/ntpd start
This is very frustrating. Installing the ntp package as above will give
you a working ntpd the first time you start it. But attempting to
restart ntpd after that will result in the same sort of SEGV as seen
with the ntpd from freebsd-update.
So far I've found that ntp-4.2.8p3 or above -- whether installed via
freebsd-updates or via package -- installed on 10.1-RELEASE-p14 or
10.2-RELEASE-p{3,4,5} will startup and run at most one time (presumably,
that's one time between successive system reboots, but I haven't tested
that.) Worse: it seems you get at most one successful startup out of
both of those variants together.
Exactly the same ntp package installed on 10.2-STABLE built yesterday
will run perfectly well, and restart just fine. Similarly the base ntpd
in 10.2-STABLE runs and restarts just fine.
Cheers,
Matthew
--NjTDsHeA1gXcMEHGXJdtMwJsW7lHvnw0q
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----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=9BZX
-----END PGP SIGNATURE-----
--NjTDsHeA1gXcMEHGXJdtMwJsW7lHvnw0q--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5630B3CC.2060505>