| Re: [chrony-users] Chronyc Call to Add Refclock |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [chrony-users] Chronyc Call to Add Refclock
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Mon, 7 Dec 2020 11:20:16 +0100
- Authentication-results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=mlichvar@xxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1607336419; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=jZkFyGVDvR4r6vGaRQ+qer98z4qT8e1+9510oBi4ZrQ=; b=bZvcPkHlwaqxOqOOaME4MzkarXJ0xao43hUqyfhBL20I12cBoVV+nV4pJGpgn8aV5lQO0G HSAD/i1miynVCRYbIIhoOn+gFBt1/OWAMbNHvO76Lzwj2HZBaWpYxB1kYRHVLzC3GFDCeg PJYGJr0/e7Gfx/dR7dt5PP1CqjrK0OY=
On Mon, Dec 07, 2020 at 01:52:42AM -0800, Hal Murray wrote:
>
> mlichvar@xxxxxxxxxx said:
> > No, refclocks cannot be added by chronyc. When chronyd is already running,
> > it's not expected to have the permissions needed to open reference clocks.
>
> The admin can fix the file permissions. What else in the refclock area needs
> special permission?
The admin could do that, but I don't think that's a good user
experience. I prefer consistency where possible. There should be only
one way for a refclock to be opened and that's chronyd on start when
it still has the root privileges.
The other issue is that it would be the first command that allows a
path to be specified or changed. Currently, you can be sure chronyd
won't touch anything else except what is specified in the config file
and the defaults.
--
Miroslav Lichvar
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.