Running service as non-root limits system exposure and it's considered best practice when doing network communication.
Signed-off-by: Bruno Thomsen <[email protected]> --- Changes since version 2: - Always run chrony daemon as chrony user. No changes since version 1. rules/chrony.make | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/chrony.make b/rules/chrony.make index afdfe434a..51141059c 100644 --- a/rules/chrony.make +++ b/rules/chrony.make @@ -53,6 +53,7 @@ CHRONY_CONF_OPT := \ --disable-phc \ --disable-pps \ $(call ptx/ifdef, PTXCONF_GLOBAL_IPV6,,--disable-ipv6) \ + --with-user=chrony \ --without-seccomp # ---------------------------------------------------------------------------- -- 2.26.2 _______________________________________________ ptxdist mailing list [email protected] To unsubscribe, send a mail with subject "unsubscribe" to [email protected]
