From owner-freebsd-security  Thu May 24  7:45:35 2001
Delivered-To: freebsd-security@freebsd.org
Received: from veldy.net (w028.z064001117.msp-mn.dsl.cnc.net [64.1.117.28])
	by hub.freebsd.org (Postfix) with ESMTP id 2034E37B424
	for <freebsd-security@freebsd.org>; Thu, 24 May 2001 07:45:27 -0700 (PDT)
	(envelope-from veldy@veldy.net)
Received: from HP2500B (fuggle.veldy.net [64.1.117.28])
	by veldy.net (Postfix) with SMTP
	id D85A2BA40; Thu, 24 May 2001 09:45:23 -0500 (CDT)
Message-ID: <002001c0e45f$f1eb4e50$3028680a@tgt.com>
From: "Thomas T. Veldhouse" <veldy@veldy.net>
To: "Rob Simmons" <rsimmons@wlcg.com>, <freebsd-security@freebsd.org>
References: <Pine.BSF.4.21.0105241027220.7270-100000@mail.wlcg.com>
Subject: Re: setting time without changing securelevel
Date: Thu, 24 May 2001 09:43:48 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

You probably shouldn't run it through cron.  Especially if you are running a
database on your machine.  You probably want to run ntpd (via xntpd_enable
knob).  It is not hard to setup, but the documentation [that is readable] is
scarce.

Tom Veldhouse
veldy@veldy.net

----- Original Message -----
From: "Rob Simmons" <rsimmons@wlcg.com>
To: "Michael Tang Helmeste" <glassfish@frogbox.dyndns.org>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Thursday, May 24, 2001 9:30 AM
Subject: Re: setting time without changing securelevel


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
>
> If you set the time at boot by adding ntpdate_enable="YES" to /etc/rc.conf
> and you set ntp to adjust the time frequently enough, it won't adjust the
> clock by more than the 1 second restriction.
>
> Robert Simmons
> Systems Administrator
> http://www.wlcg.com/
>
> On Wed, 23 May 2001, Michael Tang Helmeste wrote:
>
> > Is there any way to allow NTP to set my time without changing my
> > securelevel? I run NTP through cron, but whenever it tries to change the
> > clock, FreeBSD just changes it back to what it was before. I don't want
to
> > have to run at a lower securelevel, but only to allow changing the time.
Is
> > this possible? Thanks.
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.5 (FreeBSD)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE7DRr5v8Bofna59hYRA6axAJsHVlrpuD/vpePeR2et6Jokl0cSqACffieb
> 8IaIVGMCrBHYsIdMfzL6BVI=
> =jc+8
> -----END PGP SIGNATURE-----
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message