-
cda67351
by Miroslav Lichvar at 2026-02-12T11:53:30+01:00
makefile: rebuild everything after configure
-
fd60dabd
by Thomas Kupper at 2026-02-25T12:35:50+01:00
privops: enable system call filter
In preparation of OpenBSD support, add SYS_EnableSystemCallFilter() call
to PRV_StartHelper().
In OpenBSD the privops helper will use a system call filter (pledge(2)),
whereas in Linux the privops helper doesn't use any system call filter
at the moment.
Modify Unit test ntp_sources call to PRV_Initialise() with parameter
scfilter_level set to 0.
-
9a57ef8d
by Thomas Kupper at 2026-02-25T12:35:50+01:00
privops: add method PRV_AdjustFreq()
In preparation of adding OpenBSD support:
OpenBSD doesn't support timex but adjusting frequency using the
adjfreq(2) system call. Add a privops method PRV_AdjustFreq() to allow
unprivileged processes to set the time.
-
4ddc6b33
by Thomas Kupper at 2026-02-25T12:35:50+01:00
sys: add OpenBSD support
Add OpenBSD support, including pledge(2) support by implementing
SYS_EnableSystemCallFilter().
This commit depends on the addition of AdjustFreq() privops and the
addtion of invoking SYS_EnableSystemCallFilter() from PRV_StartHelper().
Only system call filter levels on/off' are supported. Setting level
to 0 disables the filter and setting it to 1 enables it.
Update the documentation to reflect that OpenBSD supports:
- the SCHED_FIFO real-time scheduler (option -P)
- locking chronyd into memory (option -m)
- reload sample history of servers and ref clocks (option -r)
- forking into two process when run as non-root user (option -u)
- maxdrift/maxslewrate of 100000.