From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Tue, 29 Jul 2014 16:10:40 +0000 (+0200)
Subject: doc: mention linuxcaps support in FAQ
X-Git-Tag: 1.31-pre1~56
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=17d944c33383407468d420ed4f43269015c79f52;p=thirdparty%2Fchrony.git

doc: mention linuxcaps support in FAQ
---

diff --git a/chrony.texi.in b/chrony.texi.in
index b2f4b345..0f6e37ed 100644
--- a/chrony.texi.in
+++ b/chrony.texi.in
@@ -4619,6 +4619,12 @@ bindcmdaddress ::1
 
 If you don't need to use @code{chronyc} at all, you can disable the command
 sockets by adding @code{cmdport 0} to the configuration file.
+
+On Linux, if @code{chronyd} is compiled with support for Linux capabilities
+(available in the libcap library), you can specify an unprivileged user with
+the `-u' option or @code{user} directive in the @file{chrony.conf} file to drop
+root privileges after start.  The configure option @code{--with-user} can be
+used to drop the privileges by default.
 @c }}}
 @c {{{ S:Computer is not synchronising
 @node Computer is not synchronising