From owner-cvs-all  Sun May  9 22:32:15 1999
Delivered-To: cvs-all@freebsd.org
Received: from quack.kfu.com (quack.kfu.com [170.1.70.2])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5B19B14F21; Sun,  9 May 1999 22:32:13 -0700 (PDT)
	(envelope-from nsayer@medusa.kfu.com)
Received: from medusa.kfu.com (medusa.kfu.com [170.1.70.5])
	by quack.kfu.com (8.9.2/8.8.5) with ESMTP id WAA28924;
	Sun, 9 May 1999 22:32:12 -0700 (PDT)
Received: (from nsayer@localhost)
	by medusa.kfu.com (8.9.2/8.8.8) id WAA25008;
	Sun, 9 May 1999 22:32:11 -0700 (PDT)
	(envelope-from nsayer)
From: Nick Sayer <nsayer@quack.kfu.com>
Message-Id: <199905100532.WAA25008@medusa.kfu.com>
Subject: Re: cvs commit: src/sys/kern kern_time.c
In-Reply-To: <199905100452.OAA04584@godzilla.zeta.org.au> from Bruce Evans at "May 10, 1999  2:52:46 pm"
To: bde@zeta.org.au (Bruce Evans)
Date: Sun, 9 May 1999 22:32:11 -0700 (PDT)
Cc: bde@zeta.org.au, nsayer@quack.kfu.com, cvs-all@FreeBSD.org,
	cvs-committers@FreeBSD.org, nsayer@FreeBSD.org
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

> >> An application can only avoid these problems by being fairly aware of
> >> the implementation and doing micro-adjustments, but micro-adjustments
> >> can be done better using adjtime(2), modulo the reluctance of adjtime()
> >> to adjust the time rapidly.
> >
> >Fine. Then YOU fix xntpd so that it doesn't do EXACTLY AS YOU DESCRIBE,
> >in that when the adjustment is too large it switches to making smallish
> >calls to settimeofday(). Then we can just plain outlaw settimeofday()
> >when securelevel>0. In the mean time, the code in question makes
> 
> Use the standard xntpd options SLEWALWAYS and maybe FORCE_NTPDATE_STEP.

Then those should be defined in the xntpd that is supplied by default,
otherwise the default configuration of FreeBSD will not keep time
correctly when securelevel>0 (without this patch, that is).

Can I take it, then, that you are in favor of commiting that and then
outlawing settimeofday() when securelevel>0?

> >From xntpd/include/ntp_machine.h:
[...]



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message