Package: chrony
Version: 1.30-1+b1
Severity: normal
Tags: patch
The default configuration of chrony in Debian allows it to act as an NTP
server for systems on particular subnets. I think we shouldn’t deviate from
upstream here, and let the sysadmin to manage this.
diff --git a/debian/chrony.conf b/debian/chrony.conf
index e8d9200..838593d 100644
--- a/debian/chrony.conf
+++ b/debian/chrony.conf
@@ -64,9 +64,9 @@ local stratum 10
# Allow computers on the unrouted nets to use the server.
-allow 10/8
-allow 192.168/16
-allow 172.16/12
+#allow 10/8
+#allow 192.168/16
+#allow 172.16/12
# This directive forces `chronyd' to send a message to syslog if it
# makes a system clock adjustment larger than a threshold value in seconds.
Cheers,
Vincent
-- System Information:
Debian Release: 8.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages chrony depends on:
ii install-info 5.2.0.dfsg.1-6
ii libc6 2.19-13
ii libedit2 3.1-20140620-2
ii libtomcrypt0 1.17-6
ii lsb-base 4.1+Debian13+nmu1
ii net-tools 1.60-26+b1
ii timelimit 1.8-1
ii ucf 3.0030
Versions of packages chrony recommends:
ii udev 215-11
chrony suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
