Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 Jan 2002 12:02:47 -0800
From:      Terry Lambert <tlambert2@mindspring.com>
To:        "Crist J . Clark" <cjc@FreeBSD.ORG>
Cc:        FreeBSD@jovi.net, freebsd-questions@FreeBSD.ORG, freebsd-arch@FreeBSD.ORG, bug-followup@FreeBSD.ORG
Subject:   Re: kern/33904: secure mode bug
Message-ID:  <3C45DC67.D92C32B9@mindspring.com>
References:  <CD13C334-09D5-11D6-8ED3-003065D5E9A4@infospace.com> <200201152003.g0FK3gb04767@grant.org> <20020115210303.E31328@blossom.cjclark.org>

next in thread | previous in thread | raw e-mail | index | archive | help
"Crist J . Clark" wrote:
> On Tue, Jan 15, 2002 at 03:03:42PM -0500, FreeBSD@jovi.net wrote:
> > or better yet
> > fix settimeofday to return EPERM instead of trying
> > to second-guess the intent of the programmer.
> 
> That might be a valid option. Would you be willing to patch settime()
> (in sys/kern/kern_time.c)? Would you be willing to test patches to see
> if they don't break things even worse?

Bad idea.

Specifically, the clamping doesn't prevent small deltas from
being applied, and it does not prevent larger deltas from
being applied iteratively in order to actually get a larger
delta.

This means that a delta of several minutes *will* eventually
cause the clock to slowly approach the correct value, until
it is eventually correct.

Returning an error all the time wouldn't let this happen,
since you would prevent, not clam, the adjustment.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3C45DC67.D92C32B9>