Date: Thu, 01 Apr 1999 17:52:47 -0800 From: David Greenman <dg@root.com> To: Nick Sayer <nsayer@quack.kfu.com> Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: Suggestion: loosen slightly securelevel>1 time change restriction Message-ID: <199904020152.RAA00499@implode.root.com> In-Reply-To: Your message of "Thu, 01 Apr 1999 16:33:25 PST." <199904020033.QAA09981@medusa.kfu.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>At the moment, setting the time to any point in the past (that is, >if the delta being applied is negative) is not allowed if the securelevel >of the system is >1. > >The problem with this is that even if you run ntpdate at boot time, >xntpd can occasionally want to make small negative steps. > >I suggest easing up slightly on the restriction. Say, negative steps of >more than a minute are disallowed. It would seem to me that this would >let xntpd operate correctly in most cases while still denying the >opportunity for serious mischief to hackers desiring to wreak havoc >with time warps. > >Comments? So if I want to go back an hour, I just do 60 settimeofday() calls. I don't think this is a solution. -DG David Greenman Co-founder/Principal Architect, The FreeBSD Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199904020152.RAA00499>