Package: chrony Version: 3.4-2 Severity: important Hello there! Thanks for maintaining this useful package.
I've just upgraded to version 3.4-2 and noticed that the daemon failed to restart, due to the mailonchange directive: $ grep -B 1 ^mailonchange /etc/chrony/chrony.conf # Warn root. mailonchange root@localhost 4.0 After reading /usr/share/doc/chrony/NEWS.Debian.gz , I found out that the new system call filter (which is now enabled by default) is incompatible with the mailonchange directive. This didn't make me especially happy, since that little local mail message telling me there was a significant time adjustment was nice to have... But, oh well, I can live without it, so I thought "let's get rid of it!". $ grep mailonchange /etc/chrony/chrony.conf gives no output, OK. # service chrony restart Everything seems to be fine, but: $ ps a | grep chrony 10686 pts/1 S+ 0:00 grep chrony the daemon is not running! After a bit of investigation, I found out that the log directive: $ grep '^log ' /etc/chrony/chrony.conf log tracking measurements statistics seems to also conflict with the system call filter. There are two issues with this. First of all, the NEWS.Debian.gz file does not seem to mention it (the man page also seems to say nothing about it). Secondly, with no mailonchange and no log, chrony seems to have become completely silent: how can I check that it is actually working fine, if I cannot even see which time servers it is tracking? Is this a bug or something unavoidable (that should be documented in the NEWS.Debian.gz file and/or in the man page)? I have disabled the system call filter for the time being, in order to enable log (as well as mailonchange): $ grep OPTS /etc/default/chrony DAEMON_OPTS="-F 0" Please let me know whether I misunderstood something and/or whether I am doing something wrong. Thanks for your time! Bye. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (800, 'testing'), (500, 'unstable') Architecture: i386 (i586) Kernel: Linux 4.19.0-2-686 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages chrony depends on: ii adduser 3.118 ii init-system-helpers 1.56+nmu1 ii iproute2 4.20.0-2 ii libc6 2.28-7 ii libcap2 1:2.25-2 ii libedit2 3.1-20181209-1 ii libnettle6 3.4.1-1 ii libseccomp2 2.3.3-4 ii lsb-base 10.2018112800 ii ucf 3.0038+nmu1 chrony recommends no packages. Versions of packages chrony suggests: pn dnsutils <none> pn networkd-dispatcher <none> -- Configuration Files: /etc/default/chrony changed: DAEMON_OPTS="-F 0" -- no debconf information