This is an automated email from git. It was generated because a ref change was pushed to the "chrony/chrony.git" repository.
The branch, master has been updated via 97973b1833e5f17126382c304ee78a22fce7eb51 (commit) via 9cdfc15e310887d86c74beb0d6b748572624201c (commit) via fc993172910f75bbfa26cf5928b43d4ce9bc5f85 (commit) via bb9ba3e4bd31692674cb0ff1fcfe8ff6c1f05edb (commit) via 649f54a1e6ae5b17e6dd4c0a42ad1d540e8be3a3 (commit) via 4070d7ffa6f7288c660a35ed1d1d1dffe4998653 (commit) via 0493abb68a072b053bceabedf2e8f3c072ab42b3 (commit) from 8c1e16711dad83cc4d76b17cf18257b1d0b2d8a3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 97973b1833e5f17126382c304ee78a22fce7eb51 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Wed May 5 11:21:39 2021 +0200 sys_linux: add second scfilter level Add level "2" to enable a filter which blocks only specific system calls like fork and exec* instead of blocking everything unknown. It should be reliable with respect to changes in libraries, but it provides only a very limited protection. commit 9cdfc15e310887d86c74beb0d6b748572624201c Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Apr 29 16:53:40 2021 +0200 sys_linux: allow getuid32 in seccomp filter This was triggered on x86 in an NTS test. commit fc993172910f75bbfa26cf5928b43d4ce9bc5f85 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Tue May 4 14:06:33 2021 +0200 sourcestats: check samples loaded from dump files When loading a dump file with the -r option, check also sanity of the sample time, offset, peer/root delay/dispersion, and the sample order to better handle corrupted files. commit bb9ba3e4bd31692674cb0ff1fcfe8ff6c1f05edb Author: Miroslav Lichvar <mlich...@redhat.com> Date: Tue May 4 11:49:54 2021 +0200 source: don't print duplicated address in selection message Don't print the original IP address in parentheses in the "Selected source ..." message if it is identical to the current address. That is expected to be the usual case for sources specified by IP address. commit 649f54a1e6ae5b17e6dd4c0a42ad1d540e8be3a3 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Tue May 4 11:08:59 2021 +0200 conf: log error when source cannot be added Log an error message when adding of a source fails, e.g. due to the new limit on number of sources, or when the same address is specified multiple times. commit 4070d7ffa6f7288c660a35ed1d1d1dffe4998653 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Mon May 3 14:15:28 2021 +0200 nts: close file after loading cookies Don't forget to close the file with cookies in ntsdumpdir if successfully loaded. Fixes: 2fa83b541c36 ("nts: save and load cookies on client") commit 0493abb68a072b053bceabedf2e8f3c072ab42b3 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Mon May 3 12:48:23 2021 +0200 nts: ignore long non-critical records In the NTS-KE client don't reject the response if it has non-critical records that are too long for the processing buffer. This is not expected to happen with the current specification, but it might be needed with future extensions. Fixes: 7925ed39b81f ("nts: fix handling of long server negotiation record") ----------------------------------------------------------------------- Summary of changes: conf.c | 14 +++++++-- doc/chronyd.adoc | 33 +++++++++++++-------- nts_ke_client.c | 7 +++-- nts_ntp_client.c | 2 ++ sources.c | 2 +- sourcestats.c | 14 +++++++++ sys_linux.c | 76 +++++++++++++++++++++++++++++++++++++++--------- test/system/099-scfilter | 2 +- test/system/199-scfilter | 2 +- 9 files changed, 118 insertions(+), 34 deletions(-) hooks/post-receive -- chrony/chrony.git -- To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" in the subject. For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the subject. Trouble? Email listmas...@chrony.tuxfamily.org.