3496c981ac
Code analysis and runtime analysis using truss(8) indicate that the only privileged operations performed by ntpd are adjusting system time, and (re-)binding to privileged UDP port 123. These changes add a new mac(4) policy module, mac_ntpd(4), which grants just those privileges to any process running with uid 123. This also adds a new user and group, ntpd:ntpd, (uid:gid 123:123), and makes them the owner of the /var/db/ntp directory, so that it can be used as a location where the non-privileged daemon can write files such as the driftfile, and any optional logfile or stats files. Because there are so many ways to configure ntpd, the question of how to configure it to run without root privs can be a bit complex, so that will be addressed in a separate commit. These changes are just what's required to grant the limited subset of privs to ntpd, and the small change to ntpd to prevent it from exiting with an error if running as non-root. Differential Revision: https://reviews.freebsd.org/D16281
37 lines
429 B
Plaintext
37 lines
429 B
Plaintext
# $FreeBSD$
|
|
#
|
|
wheel:*:0:root
|
|
daemon:*:1:
|
|
kmem:*:2:
|
|
sys:*:3:
|
|
tty:*:4:
|
|
operator:*:5:root
|
|
mail:*:6:
|
|
bin:*:7:
|
|
news:*:8:
|
|
man:*:9:
|
|
games:*:13:
|
|
ftp:*:14:
|
|
staff:*:20:
|
|
sshd:*:22:
|
|
smmsp:*:25:
|
|
mailnull:*:26:
|
|
guest:*:31:
|
|
video:*:44:
|
|
bind:*:53:
|
|
unbound:*:59:
|
|
proxy:*:62:
|
|
authpf:*:63:
|
|
_pflogd:*:64:
|
|
_dhcp:*:65:
|
|
uucp:*:66:
|
|
dialer:*:68:
|
|
network:*:69:
|
|
audit:*:77:
|
|
www:*:80:
|
|
ntpd:*:123:
|
|
_ypldap:*:160:
|
|
hast:*:845:
|
|
nogroup:*:65533:
|
|
nobody:*:65534:
|