wallenstein/void-packages
1
0
Fork 0
mirror of https://github.com/void-linux/void-packages.git synced 2025-06-05 06:33:50 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ntpd-rs: Set cap_net_bind_service on startup

Browse source 
Allows it to run in server mode and listen on port 123
This commit is contained in:
Urs Schulz 2025-01-08 22:45:20 +01:00 • committed by tranzystorekk
parent c93490a0eb
commit 0b4bd3900e
3 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
srcpkgs/ntpd-rs/INSTALL
View file

@ -1,5 +0,0 @@
case "${ACTION}" in
post)
setcap CAP_SYS_TIME=+ep usr/bin/ntp-daemon
;;
esac

8
srcpkgs/ntpd-rs/files/ntpd-rs/run
View file

@ -1,4 +1,10 @@
#!/bin/sh #!/bin/sh
exec 2>&1 exec 2>&1
[ -r conf ] && . ./conf
[ ! -d /run/ntpd-rs ] && mkdir /run/ntpd-rs && chown _ntpd_rs:_ntpd_rs /run/ntpd-rs [ ! -d /run/ntpd-rs ] && mkdir /run/ntpd-rs && chown _ntpd_rs:_ntpd_rs /run/ntpd-rs
exec chpst -u _ntpd_rs:_ntpd_rs ntp-daemon
exec setpriv --reuid _ntpd_rs --regid _ntpd_rs --clear-groups \
--ambient-caps -all,+sys_time,+net_bind_service \
--inh-caps -all,+sys_time,+net_bind_service \
--bounding-set -all,+sys_time,+net_bind_service \
--no-new-privs -- ntp-daemon

3
srcpkgs/ntpd-rs/template
View file

@ -1,7 +1,7 @@
# Template file for 'ntpd-rs' # Template file for 'ntpd-rs'
pkgname=ntpd-rs pkgname=ntpd-rs
version=1.4.0 version=1.4.0
revision=1 revision=2
build_style=cargo build_style=cargo
make_check_args="-- make_check_args="--
--skip daemon::keyexchange::tests::client_connection_refused --skip daemon::keyexchange::tests::client_connection_refused
@ -9,7 +9,6 @@ make_check_args="--
--skip daemon::keyexchange::tests::key_exchange_weird_packet --skip daemon::keyexchange::tests::key_exchange_weird_packet
" "
make_install_args="--path ntpd" make_install_args="--path ntpd"
depends="libcap-progs"
short_desc="Full-featured implementation of the Network Time Protocol" short_desc="Full-featured implementation of the Network Time Protocol"
maintainer="tranzystorekk <tranzystorek.io@protonmail.com>" maintainer="tranzystorekk <tranzystorek.io@protonmail.com>"
license="Apache-2.0 OR MIT" license="Apache-2.0 OR MIT"