From da515112395ea7ce0da7cba7103de65d53fc93c9 Mon Sep 17 00:00:00 2001 From: Benjamin Gilbert Date: Tue, 15 May 2018 22:13:57 -0400 Subject: [PATCH] net-misc/ntp: add notrap to default restrict config It's a common security hardening option and doesn't seem likely to affect any actual usage. --- .../src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf | 2 +- .../ntp/{ntp-4.2.8_p11.ebuild => ntp-4.2.8_p11-r1.ebuild} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename sdk_container/src/third_party/coreos-overlay/net-misc/ntp/{ntp-4.2.8_p11.ebuild => ntp-4.2.8_p11-r1.ebuild} (100%) diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf index 57dc00ec39..bbd8e21437 100644 --- a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf @@ -14,6 +14,6 @@ server 3.coreos.pool.ntp.org # Default configuration: # - Allow only time queries, at a limited rate, sending KoD when in excess. # - Allow all local queries (IPv4, IPv6) -restrict default nomodify nopeer noquery limited kod +restrict default nomodify nopeer noquery notrap limited kod restrict 127.0.0.1 restrict [::1] diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p11.ebuild b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p11-r1.ebuild similarity index 100% rename from sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p11.ebuild rename to sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p11-r1.ebuild