Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Aug 1999 11:19:18 -0700 (PDT)
From:      Archie Cobbs <archie@whistle.com>
To:        Goran.Lowkrantz@infologigruppen.se (Lowkrantz Goran)
Cc:        freebsd-security@FreeBSD.ORG ('freebsd-security@FreeBSD.ORG')
Subject:   Re: Securelevel 3 ant setting time
Message-ID:  <199908191819.LAA94866@bubba.whistle.com>
In-Reply-To: <B500F74C6527D311B61F0000C0DF5ADC07ECB5@valhall.ign.se> from "Lowkrantz, Goran" at "Aug 18, 1999 09:54:53 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Lowkrantz, Goran writes:
> Just found that I can't correct the time on my firewall, running at security
> level 3. When I try I get the following:
> 
> date: settimeofday (timeval): Operation not permitted
> 
> Is this by design? If so, why?

Yes, this is to prevent attacks that use wrong time settings.
You are allowed to change the time a little bit, just not a lot.

The solution would be to do somthing like this..

 - At boot time, before setting the securelevel, run ntpdate
 - Run xntpd normally

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908191819.LAA94866>