Date: Fri, 20 Aug 1999 00:46:13 +0200 From: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se> To: "'David G. Andersen'" <danderse@cs.utah.edu> Cc: freebsd-security@FreeBSD.ORG Subject: RE: Securelevel 3 ant setting time Message-ID: <B500F74C6527D311B61F0000C0DF5ADC07ECC9@valhall.ign.se>
next in thread | raw e-mail | index | archive | help
Hi,
I got it working. I added a script to /usr/local/etc/rc.d that run ntpdate
during boot before securlevel is set. I made it a small script as I check
time from a few servers and if one don't work, I test with the next one.
Thanks,
GLZ
-----Original Message-----
From: David G. Andersen [mailto:danderse@cs.utah.edu]
Sent: Friday, August 20, 1999 12:31 AM
To: Brett Glass
Cc: Archie Cobbs; Goran.Lowkrantz@infologigruppen.se;
freebsd-security@FreeBSD.ORG
Subject: Re: Securelevel 3 ant setting time
"Maybe". (Probably?)
When ntpdate sees a small time delta (less than 1/2 second off), it
will use the adjtime() call to slew the clock time, which is
permitted. However, if the delta is large for some reason, then it
will go in and use the sledgehammer approach - settimeofday().
>From the ntpdate manpage:
The latter technique is less disruptive and
more accurate when the offset is small, and works quite well when
ntpdate
is run by cron(8) every hour or two.
So, you'll probably be OK doing it that way, *but* if you get too far
off during the time period, then you won't be able to correct for it.
-Dave
Lo and Behold, Brett Glass said:
> My server uses a cron job and ntpupdate to grab tne time from the
> best of several accurate government servers. Would securelevel 3 allow
> this?
--
work: danderse@cs.utah.edu me: angio@pobox.com
University of Utah CS Department http://www.angio.net/
"If you haul a geek up a crack, you will bloody their fingers for a
day...
If you teach a geek to climb, you will bloody their fingers for life."
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B500F74C6527D311B61F0000C0DF5ADC07ECC9>