]> git.ipfire.org Git - thirdparty/chrony.git/commit
cmdmon: remove authentication support
authorMiroslav Lichvar <mlichvar@redhat.com>
Mon, 13 Apr 2015 08:44:15 +0000 (10:44 +0200)
committerMiroslav Lichvar <mlichvar@redhat.com>
Fri, 21 Aug 2015 11:26:46 +0000 (13:26 +0200)
commit49846b3e68f04c984018ecf5d86d4429f867d15b
treeb815e4fe3eae9235b57744f0375966f3961e96e6
parent0887824324f15a8fdd15c2bfe7d8aa2bf77fb838
cmdmon: remove authentication support

With the new support for cmdmon over Unix domain sockets, authentication
is no longer necessary to authorize a client running on localhost with
the permissions of the root or chrony user/group. Remove the cmdmon
authentication support to simplify the code and significantly reduce the
attack surface of the protocol.

Only monitoring commands are now allowed remotely. Users that need to
configure chronyd remotely or locally without root/chrony permissions
are advised to use ssh and/or sudo.
cmdmon.c