Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 09 Oct 1998 12:27:41 -0700
From:      David Greenman <dg@root.com>
To:        Studded <Studded@gorean.org>
Cc:        Randy Bush <randy@psg.com>, Marc Gutschner <Marc.Gutschner@triplan.com>, freebsd-stable@FreeBSD.ORG
Subject:   Re: Is 'xntpd' broken in -stable? 
Message-ID:  <199810091927.MAA14061@implode.root.com>
In-Reply-To: Your message of "Fri, 09 Oct 1998 11:03:20 PDT." <361E4FE8.2EF1B5DA@gorean.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
>> > issue an 'ntpdate whatever.your.primary.time.host.is' then you should be
>> > able to start xntpd.
>> 
>> Oct  9 10:56:57 rip ntpdate: Can't set time of day: Operation not permitted
>
>	Hmmm.. that looks like you weren't root at the time. Make sure that
>you're root, that there is no ntp/xntpd server running, and type:
>
>ntpdate ucsd.ucsd.edu
>
>	That should get it. If it doesn't, something is dreadfully wrong. 

   I think Randy's question is: Does xntpd work when securelevel == 2? The
answer is "sort of". With securelevel > 1 you can only speed up or slow down
the clock via adjtime(); the system will not let you set the time backwards
(e.g. with settimeofday). This is a security feature which prevents people
from changing the time of day, touching a file, and then setting it back (and
thus allow you to reset the inode change time into the past). This restriction
was adopted from NetBSD in rev 1.23 of sys/kern/kern_time.c.

-DG

David Greenman
Co-founder/Principal Architect, The FreeBSD Project


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810091927.MAA14061>