From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: In-Reply-To: <20200731161141.6155-5-bruno.thomsen@gmail.com> MIME-Version: 1.0 Message-Id: From: Michael Olbrich Date: Mon, 03 Aug 2020 08:30:20 +0200 Subject: Re: [ptxdist] [APPLIED] chrony: run chronyd as chrony user List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: ptxdist@pengutronix.de Cc: Bruno Thomsen Thanks, applied as a1045bff1045a99c17f00ae017d58f6a0b7588fd. Michael [sent from post-receive hook] On Mon, 03 Aug 2020 08:30:20 +0200, Bruno Thomsen wrote: > Running service as non-root limits system exposure and it's > considered best practice when doing network communication. > > Signed-off-by: Bruno Thomsen > Message-Id: <20200731161141.6155-5-bruno.thomsen@gmail.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/chrony.make b/rules/chrony.make > index afdfe434ad0a..51141059ccfd 100644 > --- a/rules/chrony.make > +++ b/rules/chrony.make > @@ -53,6 +53,7 @@ CHRONY_CONF_OPT := \ > --disable-phc \ > --disable-pps \ > $(call ptx/ifdef, PTXCONF_GLOBAL_IPV6,,--disable-ipv6) \ > + --with-user=chrony \ > --without-seccomp > > # ---------------------------------------------------------------------------- _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de