NetBSD Problem Report #51759

From www@NetBSD.org  Sun Jan  1 18:34:55 2017
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id B3BAC7A234
	for <gnats-bugs@gnats.NetBSD.org>; Sun,  1 Jan 2017 18:34:55 +0000 (UTC)
Message-Id: <20170101183454.863C17A2A7@mollari.NetBSD.org>
Date: Sun,  1 Jan 2017 18:34:54 +0000 (UTC)
From: henning.petersen@t-online.de
Reply-To: henning.petersen@t-online.de
To: gnats-bugs@NetBSD.org
Subject: Missing limited in ntp.conf
X-Send-Pr-Version: www-1.0

>Number:         51759
>Category:       misc
>Synopsis:       Missing limited in ntp.conf
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    misc-bug-people
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jan 01 18:35:00 +0000 2017
>Closed-Date:    Tue May 29 20:48:54 +0000 2018
>Last-Modified:  Tue May 29 20:48:54 +0000 2018
>Originator:     henning petersen
>Release:        NetBSD-current
>Organization:
>Environment:
>Description:
in messages I have seen this,

"ntpd[306]: restrict default: KOD does nothing without LIMITED"

add limited to line with kod in ntp.conf.
>How-To-Repeat:

>Fix:
diff -u -u -p -r1.19 ntp.conf
--- etc/ntp.conf	14 Jan 2014 13:23:46 -0000	1.19
+++ etc/ntp.conf	1 Jan 2017 17:53:07 -0000
@@ -62,7 +62,8 @@ mdnstries	0
 # arrangement, but deny configuration changes, queries, and peer
 # associations that were not explicitly configured.
 #
-restrict default kod nopeer noquery
+restrict default limited kod nopeer noquery

 # Fewer restrictions for the local subnet.
 # (Uncomment and adjust as appropriate.)

>Release-Note:

>Audit-Trail:

State-Changed-From-To: open->closed
State-Changed-By: zafer@NetBSD.org
State-Changed-When: Tue, 29 May 2018 20:48:54 +0000
State-Changed-Why:
Fixed by christos in v1.20 of ntp.conf
Thank you Henning for the problem report.


>Unformatted:

Home	PR Database Search