ntpd: Do not allow privsep user to be a privileged user

2015-02-09 Thread Brent Cook
Since openntpd-portable allows configuring the privsep user, do a couple of sanity checks at runtime to make sure the privsep user wasn't configured as root. This might be overkill. --- src/usr.sbin/ntpd/ntp.c | 6 ++ 1 file changed, 6 insertions(+) diff --git a/src/usr.sbin/ntpd/ntp.c

Re: ntpd: Do not allow privsep user to be a privileged user

2015-02-09 Thread Reyk Floeter
On Mon, Feb 09, 2015 at 10:37:01PM -0600, Brent Cook wrote: Since openntpd-portable allows configuring the privsep user, do a couple of sanity checks at runtime to make sure the privsep user wasn't configured as root. This might be overkill. I wouldn't like if ntpd has anything special

ntpd: do not allow privsep user to be a privileged user

2015-01-03 Thread Brent Cook
From: Brent Cook bust...@gmail.com Maybe these two checks are redundant. OpenNTPD-portable lets one configure the built-in privilege separation username. Thus, you can potentially configure that user to be root as well. --- src/usr.sbin/ntpd/ntp.c | 6 ++ 1 file changed, 6 insertions(+)