Change default to "restrict default kod limited nomodify nopeer noquery"

[Gary E. Miller]

Yo Mark!

On Sat, 10 Dec 2016 20:14:09 +0000
Mark Atwood <fallenpegasus at gmail.com> wrote:

> > I'm requesting comment on the following behavior change:
> > (1) Make these the default restrictions at startup, replacing none
> > at all. (2) Retain current behavior if built with
> > --enable-classic-mode. 
> 
> I like it, and learn towards saying yes.  Let's see what Hal and
> others say.

+1

> We may want to emit a log warning if the daemon is ever configured to
> allow modify, peer, or query from global.


+1


RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <http://lists.ntpsec.org/pipermail/devel/attachments/20161210/25562cce/attachment.bin>