From owner-freebsd-security  Thu May 24  7:30:27 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4])
	by hub.freebsd.org (Postfix) with ESMTP id 4FDB537B424
	for <freebsd-security@FreeBSD.ORG>; Thu, 24 May 2001 07:30:24 -0700 (PDT)
	(envelope-from rsimmons@wlcg.com)
Received: from localhost (rsimmons@localhost)
	by mail.wlcg.com (8.11.3/8.11.3) with ESMTP id f4OEUHx24465;
	Thu, 24 May 2001 10:30:20 -0400 (EDT)
	(envelope-from rsimmons@wlcg.com)
Date: Thu, 24 May 2001 10:30:13 -0400 (EDT)
From: Rob Simmons <rsimmons@wlcg.com>
To: Michael Tang Helmeste <glassfish@frogbox.dyndns.org>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: setting time without changing securelevel
In-Reply-To: <GLECJJEOFFBMALIKCDHIMEIFCAAA.glassfish@glassfish.net>
Message-ID: <Pine.BSF.4.21.0105241027220.7270-100000@mail.wlcg.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

If you set the time at boot by adding ntpdate_enable="YES" to /etc/rc.conf
and you set ntp to adjust the time frequently enough, it won't adjust the
clock by more than the 1 second restriction.

Robert Simmons
Systems Administrator
http://www.wlcg.com/

On Wed, 23 May 2001, Michael Tang Helmeste wrote:

> Is there any way to allow NTP to set my time without changing my
> securelevel? I run NTP through cron, but whenever it tries to change the
> clock, FreeBSD just changes it back to what it was before. I don't want to
> have to run at a lower securelevel, but only to allow changing the time. Is
> this possible? Thanks.
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7DRr5v8Bofna59hYRA6axAJsHVlrpuD/vpePeR2et6Jokl0cSqACffieb
8IaIVGMCrBHYsIdMfzL6BVI=
=jc+8
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message