ntpsec | systemd: Do not restart (!576)

Hal Murray hmurray at megapathdsl.net
Sun Nov 26 08:42:17 UTC 2017

> It is important to specify -g on the command line to allow NTP to correct
> the clock on boot.  However, if Restart=yes is set, a malicious (or broken)
> server could send the incorrect time, trip the panic threshold, and when
> ntpd restarts, serve it the incorrect time (which would be accepted). 

Should we collect a list of configuration issues that admins (and distros) 
should think about?

These are my opinions.  I hate spam.

More information about the devel mailing list