svn commit: r336562 - head

[Ronald Klop]

On Fri, 20 Jul 2018 20:02:53 +0200, Ian Lepore <ian at freebsd.org> wrote:

> Author: ian
> Date: Fri Jul 20 18:02:52 2018
> New Revision: 336562
> URL: https://svnweb.freebsd.org/changeset/base/336562
>
> Log:
>   Add a note about the new 'ntpd' userid, and the fact that rc.d/ntpd now
>   automatically runs the daemon as that user if it can.


Like the work you do hardening the system out-of-the-box.

Regards,
Ronald.



>
> Modified:
>   head/UPDATING
>
> Modified: head/UPDATING
> ==============================================================================
> --- head/UPDATING	Fri Jul 20 17:46:55 2018	(r336561)
> +++ head/UPDATING	Fri Jul 20 18:02:52 2018	(r336562)
> @@ -38,6 +38,17 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12.x IS SLOW:
>  	in place from zfsloader to loader to allow a smooth transition
>  	until the boot blocks can be updated.
> +20180719:
> +	New uid:gid added, ntpd:ntpd (123:123).  Be sure to run mergemaster
> +	or take steps to update /etc/passwd before doing installworld on
> +	existing systems.  Also, rc.d/ntpd now starts ntpd(8) as user ntpd
> +	if the new mac_ntpd(4) policy is available, unless ntpd_flags or
> +	the ntp config file contain options that change file/dir locations.
> +	When such options (e.g., "statsdir" or "crypto") are used, ntpd can
> +	still be run as non-root by setting ntpd_user=ntpd in rc.conf, after
> +	taking steps to ensure that all required files/dirs are accessible
> +	by the ntpd user.
> +
>  20180717:
>  	Big endian arm support has been removed.
> _______________________________________________
> svn-src-all at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/svn-src-all
> To unsubscribe, send any mail to "svn-src-all-unsubscribe at freebsd.org"