aboutsummaryrefslogtreecommitdiff
path: root/package/chrony
Commit message (Collapse)AuthorAgeFilesLines
* chrony: bump to version 2.4Gravatar Peter Korsgaard2016-06-072-4/+4
| | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: bump versionGravatar Peter Korsgaard2016-04-282-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the release notes: Enhancements ------------ * Add support for NTP and command response rate limiting * Add support for dropping root privileges on Mac OS X, FreeBSD, Solaris * Add require and trust options for source selection * Enable logchange by default (1 second threshold) * Set RTC on Mac OS X with rtcsync directive * Allow binding to NTP port after dropping root privileges on NetBSD * Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port is disabled * Resolve names in separate process when seccomp filter is enabled * Replace old records in client log when memory limit is reached * Don't reveal local time and synchronisation state in client packets * Don't keep client sockets open for longer than necessary * Ignore poll in KoD RATE packets as ntpd doesn't always set it correctly * Warn when using keys shorter than 80 bits * Add keygen command to generate random keys easily * Add serverstats command to report NTP and command packet statistics Bug fixes --------- * Fix clock correction after making step on Mac OS X * Fix building on Solaris Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/chrony: add optional support for libcapGravatar Bernd Kuhls2016-02-211-0/+6
| | | | | | | | | | | | | | When libcap was compiled before, chrony will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/sbin/chronyd | grep NEEDED 0x0000000000000001 (NEEDED) Shared library: [libm.so.1] 0x0000000000000001 (NEEDED) Shared library: [libcap.so.2] 0x0000000000000001 (NEEDED) Shared library: [libpthread.so.1] 0x0000000000000001 (NEEDED) Shared library: [libc.so.1] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: security bump to version 2.2.1Gravatar James Knight2016-02-112-4/+4
| | | | | | | | | Fixes: CVE-2016-1567: Impersonation between authenticated peers. Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* chrony: bump to version 2.2Gravatar James Knight2015-11-192-11/+10
| | | | | | | | | | | | | | With the new version, documentation is not generated part of the main build. This removes the need to alter the Makefile to remove the invoke on the `chrony.txt` target. Cleanup also explicitly disabling seccomp (since its experimental) and tomcrypt (Buildroot does not have libtomcrypt at this time). [Thomas: use tabs for indentation in the definition of CHRONY_CONF_OPTS.] Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: Replace 'echo -n' by 'printf'Gravatar Maxime Hadjinlian2015-10-041-2/+2
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* chrony: S49chrony: fix starting messageGravatar Peter Korsgaard2015-09-241-1/+1
| | | | | | Purely cosmetical. The OK/FAIL should go on the same line as "Starting ..". Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: Fix source path for systemd's serviceGravatar Maxime Hadjinlian2015-07-131-1/+1
| | | | | | | | Otherwise the link would appear broken in output/target it's not that big a deal but at least it's coherent with what we already have. Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: systemd supportGravatar Alex Suykov2015-07-132-0/+19
| | | | | | | | | systemd has its own NTP daemon, which must be disabled before starting chrony. Possible (but unlikely) conflict with openntpd is not marked in either package. Signed-off-by: Alex Suykov <alex.suykov@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove non-IPv6 dependencies and tweaksGravatar Gustavo Zacarias2015-04-221-4/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: bump versionGravatar Peter Korsgaard2014-12-292-1/+4
| | | | | | And add hash file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSGravatar Thomas De Schampheleire2014-10-041-5/+5
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: disable docs buildGravatar Gustavo Zacarias2014-09-011-0/+6
| | | | | | | | Needs makeinfo and we don't care about docs. Fixes: http://autobuild.buildroot.net/results/fd0/fd03a86ed670c765d9f0a1ed6cc913079e030fc9/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* chrony: bump versionGravatar Peter Korsgaard2014-08-121-1/+1
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* chrony: add sysv initscriptGravatar Peter Korsgaard2014-08-122-0/+30
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: remove the trailing slash sign from <PKG>_SITE variableGravatar Jerzy Grzegorek2014-07-311-1/+1
| | | | | | | | | | | | Since the trailing slash is stripped from $($(PKG)_SITE) by pkg-generic.mk: $(call DOWNLOAD,$($(PKG)_SITE:/=)/$($(PKG)_SOURCE)) so it is redundant. This patch removes it from $(PKG)_SITE variable for BR consistency. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* chrony: bump versionGravatar Peter Korsgaard2014-03-111-1/+1
| | | | | | | | | | | | | | | | | Fixes CVE-2014-0021: Amplification in chrony control protocol In the chrony control protocol some replies are significantly larger than their requests, which allows an attacker to use it in an amplification attack. With hosts allowed by cmdallow (only localhost by default) the maximum amplification factor is 9.2. Hosts that are not allowed receive a small reply with error status, which allows amplification of up to 1.5. To fix the problem, the protocol has been modified to require padding in the request packet, so replies are never larger than their requests. Also, chronyd no longer sends replies with error status to hosts that are not allowed by cmdallow. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove uninstall commandsGravatar Thomas De Schampheleire2013-12-061-4/+0
| | | | | Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* chrony: bump to version 1.29Gravatar Jerzy Grzegorek2013-10-101-1/+1
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Normalize separator size to 80Gravatar Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* chrony: new packageGravatar Nathan Lynch2013-05-072-0/+54
Signed-off-by: Nathan Lynch <ntl@pobox.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>