From owner-freebsd-current Fri Jan 8 14:52:54 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA07243 for freebsd-current-outgoing; Fri, 8 Jan 1999 14:52:54 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from aurora.sol.net (aurora.sol.net [206.55.65.76]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA07237 for ; Fri, 8 Jan 1999 14:52:52 -0800 (PST) (envelope-from jgreco@aurora.sol.net) Received: (from jgreco@localhost) by aurora.sol.net (8.8.8/8.8.8/SNNS-1.02) id QAA01092; Fri, 8 Jan 1999 16:51:58 -0600 (CST) From: Joe Greco Message-Id: <199901082251.QAA01092@aurora.sol.net> Subject: Re: 3.0R and NTP, security changes in settimeofday In-Reply-To: from "stenn@whimsy.udel.edu" at "Jan 8, 99 04:04:20 pm" To: stenn@whimsy.udel.edu Date: Fri, 8 Jan 1999 16:51:58 -0600 (CST) Cc: current@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL32 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > xntp 3.4e is Horribly Ancient and massively buggy. There is a port of > ntp-4.0.73something in the ports collection, but the latest release > (4.0.90h or so) should work fine out of the box. Yeah, well, it came with the system... which is why I posted my gripe mainly at the FreeBSD lists. :-) But I thought the NTP people would like to know that such a restriction is now being imposed by a modern operating system. Unfortunately, I maintain over a hundred systems, and running around to custom-install NTP on each just isn't an option. I don't think that it was completely unreasonable behaviour by NTP anyways, since at the time, I believe that the securelevel restriction did not exist. However, today, I'd like to see the FreeBSD people either consider a workaround, or upgrading and verifying that a newer NTP works properly. If you're going to prevent the system from changing the clock backwards, it seems only reasonable to make sure that the time daemon can live with that. Thanks for the note, ... Joe ------------------------------------------------------------------------------- Joe Greco - Systems Administrator jgreco@ns.sol.net Solaria Public Access UNIX - Milwaukee, WI 414/342-4847 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message