Thanks, applied as a1045bff1045a99c17f00ae017d58f6a0b7588fd. Michael
[sent from post-receive hook] On Mon, 03 Aug 2020 08:30:20 +0200, Bruno Thomsen <[email protected]> wrote: > Running service as non-root limits system exposure and it's > considered best practice when doing network communication. > > Signed-off-by: Bruno Thomsen <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/chrony.make b/rules/chrony.make > index afdfe434ad0a..51141059ccfd 100644 > --- a/rules/chrony.make > +++ b/rules/chrony.make > @@ -53,6 +53,7 @@ CHRONY_CONF_OPT := \ > --disable-phc \ > --disable-pps \ > $(call ptx/ifdef, PTXCONF_GLOBAL_IPV6,,--disable-ipv6) \ > + --with-user=chrony \ > --without-seccomp > > # > ---------------------------------------------------------------------------- _______________________________________________ ptxdist mailing list [email protected] To unsubscribe, send a mail with subject "unsubscribe" to [email protected]
