Revision: 5775 http://ipcop.svn.sourceforge.net/ipcop/?rev=5775&view=rev Author: gespinasse Date: 2011-08-09 19:43:58 +0000 (Tue, 09 Aug 2011)
Log Message: ----------- Update ntp droproot patch to prepare for 4.2.6p4 - with fedora git URL instead of cvs - with html part of the patch removed as not applying on p4-RC2, (as we don't ship doc, we don't need that part) This is still RC2 of 4.2.4p4, so no hurry actually Modified Paths: -------------- ipcop/trunk/src/patches/ntp-4.2.6_droproot.patch Modified: ipcop/trunk/src/patches/ntp-4.2.6_droproot.patch =================================================================== --- ipcop/trunk/src/patches/ntp-4.2.6_droproot.patch 2011-08-09 18:58:01 UTC (rev 5774) +++ ipcop/trunk/src/patches/ntp-4.2.6_droproot.patch 2011-08-09 19:43:58 UTC (rev 5775) @@ -1,6 +1,7 @@ borrowed from fedora -http://cvs.fedora.redhat.com/viewcvs/*checkout*/devel/ntp/ntp-4.2.4p0-droproot.patch?rev=1.1 +http://pkgs.fedoraproject.org/gitweb/?p=ntp.git;a=tree patch ntpdate to droot rights to ntp user +dropt html part of the patch as not applying on p4-RC2 and not used by us --- ntp-4.2.4p0/ntpdate/ntpdate.c.droproot 2007-02-22 12:02:08.000000000 +0100 +++ ntp-4.2.4p0/ntpdate/ntpdate.c 2007-03-07 16:06:26.000000000 +0100 @@ -48,6 +48,12 @@ @@ -183,26 +184,3 @@ while (complete_servers < sys_numservers) { #ifdef HAVE_POLL_H struct pollfd* rdfdes; ---- ntp-4.2.4p0/html/ntpdate.html.droproot 2006-12-28 13:02:58.000000000 +0100 -+++ ntp-4.2.4p0/html/ntpdate.html 2007-03-07 15:57:33.000000000 +0100 -@@ -18,7 +18,7 @@ - <hr> - <p>Disclaimer: The functionality of this program is now available in the <tt>ntpd</tt> program. See the <tt>-q</tt> command line option in the <a href="ntpd.html"><tt>ntpd</tt> - Network Time Protocol (NTP) daemon</a> page. After a suitable period of mourning, the <tt>ntpdate</tt> program is to be retired from this distribution</p> - <h4>Synopsis</h4> -- <tt>ntpdate [ -bBdoqsuv ] [ -a <i>key</i> ] [ -e <i>authdelay</i> ] [ -k <i>keyfile</i> ] [ -o <i>version</i> ] [ -p <i>samples</i> ] [ -t <i>timeout</i> ] <i>server</i> [ ... ]</tt> -+ <tt>ntpdate [ -bBdoqsuv ] [ -a <i>key</i> ] [ -e <i>authdelay</i> ] [ -k <i>keyfile</i> ] [ -o <i>version</i> ] [ -p <i>samples</i> ] [ -t <i>timeout</i> ] [ -U <i>user_name</i> ] <i>server</i> [ ... ]</tt> - <h4>Description</h4> - <tt>ntpdate</tt> sets the local date and time by polling the Network Time Protocol (NTP) server(s) given as the <i>server</i> arguments to determine the correct time. It must be run as root on the local host. A number of samples are obtained from each of the servers specified and a subset of the NTP clock filter and selection algorithms are applied to select the best of these. Note that the accuracy and reliability of <tt>ntpdate</tt> depends on the number of servers, the number of polls each time it is run and the interval between runs. - <p><tt>ntpdate</tt> can be run manually as necessary to set the host clock, or it can be run from the host startup script to set the clock at boot time. This is useful in some cases to set the clock initially before starting the NTP daemon <tt>ntpd</tt>. It is also possible to run <tt>ntpdate</tt> from a <tt>cron</tt> script. However, it is important to note that <tt>ntpdate</tt> with contrived <tt>cron</tt> scripts is no substitute for the NTP daemon, which uses sophisticated algorithms to maximize accuracy and reliability while minimizing resource use. Finally, since <tt>ntpdate</tt> does not discipline the host clock frequency as does <tt>ntpd</tt>, the accuracy using <tt>ntpdate</tt> is limited.</p> -@@ -58,6 +58,11 @@ - <dd>Direct <tt>ntpdate</tt> to use an unprivileged port or outgoing packets. This is most useful when behind a firewall that blocks incoming traffic to privileged ports, and you want to synchronise with hosts beyond the firewall. Note that the <tt>-d</tt> option always uses unprivileged ports. - <dt><tt>-<i>v</i></tt> - <dd>Be verbose. This option will cause <tt>ntpdate</tt>'s version identification string to be logged. -+ -+ <dt><tt>-U <i>user_name</i></tt></dt> -+ <dd>ntpdate process drops root privileges and changes user ID to -+ <i>user_name</i> and group ID to the primary group of -+ <i>server_user</i>. - </dl> - <h4>Diagnostics</h4> - <tt>ntpdate</tt>'s exit status is zero if it finds a server and updates the clock, and nonzero otherwise. This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. ------------------------------------------------------------------------------ uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev _______________________________________________ Ipcop-svn mailing list Ipcop-svn@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/ipcop-svn