Matthias Berndt wrote: > I think it makes sense to run ntpd as restricted user to prevent > security problems. By adding "--enable-linuxcaps" as configure > switch, one user:group combo to the system and appending "-u ntp:ntp" to > the bootscripts all nedded things get done.
This is a reasonable thing to do, but what is the "--enable-linuxcaps" thing? [/usr/src/ntp/ntp-4.2.0]$ grep linuxcaps configure [/usr/src/ntp/ntp-4.2.0]$ Looking at the source, it appears that the variable HAVE_CLOCKCTL must be defined to change user and that is only if sys/clockctl.h exists (which it doesn't). I suppose we could append '#define HAVE_CLOCKCTL 1' to config.h. If someone wants to test this out, we can consider making this change. -- Bruce -- http://linuxfromscratch.org/mailman/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
