From owner-freebsd-security  Wed May 23 22:28:53 2001
Delivered-To: freebsd-security@freebsd.org
Received: from sbtx.tmn.ru (sbtx.tmn.ru [212.76.160.49])
	by hub.freebsd.org (Postfix) with ESMTP id 2CA3737B423
	for <freebsd-security@FreeBSD.ORG>; Wed, 23 May 2001 22:28:50 -0700 (PDT)
	(envelope-from serg@sbtx.tmn.ru)
Received: from sv.tech.sibitex.tmn.ru (sv.tech.sibitex.tmn.ru [212.76.160.59])
	by sbtx.tmn.ru (8.11.3/8.11.3) with ESMTP id f4O5SgI38971;
	Thu, 24 May 2001 11:28:42 +0600 (YEKST)
	(envelope-from serg@sbtx.tmn.ru)
Received: (from serg@localhost)
	by sv.tech.sibitex.tmn.ru (8.11.3/8.11.3) id f4O5SgZ33434;
	Thu, 24 May 2001 11:28:42 +0600 (YEKST)
	(envelope-from serg)
Date: Thu, 24 May 2001 11:28:42 +0600
From: "Sergey N. Voronkov" <serg@tmn.ru>
To: Michael Tang Helmeste <glassfish@frogbox.dyndns.org>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: setting time without changing securelevel
Message-ID: <20010524112842.A33408@sv.tech.sibitex.tmn.ru>
References: <GLECJJEOFFBMALIKCDHIMEIFCAAA.glassfish@glassfish.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <GLECJJEOFFBMALIKCDHIMEIFCAAA.glassfish@glassfish.net>; from glassfish@frogbox.dyndns.org on Wed, May 23, 2001 at 10:29:54PM -0400
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Wed, May 23, 2001 at 10:29:54PM -0400, Michael Tang Helmeste wrote:
> Is there any way to allow NTP to set my time without changing my
> securelevel? I run NTP through cron, but whenever it tries to change the
> clock, FreeBSD just changes it back to what it was before. I don't want to
> have to run at a lower securelevel, but only to allow changing the time. Is
> this possible? Thanks.
> 

ntpd -x ?

[from man ntpd]
     -x      Ordinarily, if the time is to be adjusted more than 128 ms, it is
             stepped, not gradually slewed.  This option forces the time to be
             slewed in all cases.  Note: since the slew rate is limited to 0.5
             ms/s, each second of adjustment requires an amortization interval
             of 2000 s.  Thus, an adjustment of many seconds can take hours or
             days to amortize.

Bye,

Serg.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message