From f7bb28353653537d23ed83e0e778cac3e05d54c4 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Tue, 11 Feb 2025 16:25:05 +0100 Subject: [PATCH] doc: mention localhost exception in cmdallow description --- doc/chrony.conf.adoc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/doc/chrony.conf.adoc b/doc/chrony.conf.adoc index b1dbbf79..f56f21e7 100644 --- a/doc/chrony.conf.adoc +++ b/doc/chrony.conf.adoc @@ -2102,6 +2102,9 @@ The syntax is identical to the *allow* directive. There is also a *cmdallow all* directive with similar behaviour to the *allow all* directive (but applying to monitoring access in this case, of course). + +Addresses _127.0.0.1_ and _::1_ (i.e. the loopback interface) are always +allowed. ++ Note that *chronyd* has to be configured with the <> directive to not listen only on the loopback interface to actually allow remote access. -- 2.47.2