From owner-freebsd-stable  Fri Oct  9 12:29:40 1998
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA00239
          for freebsd-stable-outgoing; Fri, 9 Oct 1998 12:29:40 -0700 (PDT)
          (envelope-from owner-freebsd-stable@FreeBSD.ORG)
Received: from implode.root.com (implode.root.com [198.145.90.17])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA00233
          for <freebsd-stable@FreeBSD.ORG>; Fri, 9 Oct 1998 12:29:38 -0700 (PDT)
          (envelope-from root@implode.root.com)
Received: from implode.root.com (localhost [127.0.0.1])
	by implode.root.com (8.8.5/8.8.5) with ESMTP id MAA14061;
	Fri, 9 Oct 1998 12:27:41 -0700 (PDT)
Message-Id: <199810091927.MAA14061@implode.root.com>
To: Studded <Studded@gorean.org>
cc: Randy Bush <randy@psg.com>, Marc Gutschner <Marc.Gutschner@triplan.com>,
        freebsd-stable@FreeBSD.ORG
Subject: Re: Is 'xntpd' broken in -stable? 
In-reply-to: Your message of "Fri, 09 Oct 1998 11:03:20 PDT."
             <361E4FE8.2EF1B5DA@gorean.org> 
From: David Greenman <dg@root.com>
Reply-To: dg@root.com
Date: Fri, 09 Oct 1998 12:27:41 -0700
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

>> > issue an 'ntpdate whatever.your.primary.time.host.is' then you should be
>> > able to start xntpd.
>> 
>> Oct  9 10:56:57 rip ntpdate: Can't set time of day: Operation not permitted
>
>	Hmmm.. that looks like you weren't root at the time. Make sure that
>you're root, that there is no ntp/xntpd server running, and type:
>
>ntpdate ucsd.ucsd.edu
>
>	That should get it. If it doesn't, something is dreadfully wrong. 

   I think Randy's question is: Does xntpd work when securelevel == 2? The
answer is "sort of". With securelevel > 1 you can only speed up or slow down
the clock via adjtime(); the system will not let you set the time backwards
(e.g. with settimeofday). This is a security feature which prevents people
from changing the time of day, touching a file, and then setting it back (and
thus allow you to reset the inode change time into the past). This restriction
was adopted from NetBSD in rev 1.23 of sys/kern/kern_time.c.

-DG

David Greenman
Co-founder/Principal Architect, The FreeBSD Project


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message