On 21 Mar 2005, at 14:49, Pekka Savola wrote:
On Mon, 21 Mar 2005, Paul A. Houle wrote:
> How does SELinux apply to NTP in FC4?
Well, you don't need SELinux. NTPD as shipped runs by default as user
'ntp' (AFAIR), and can be chrooted as well. OpenNTPD takes the
functional separation a bit further. About the only thing a "bad
packet" can cause is adjusting your clock.. whether that's bad or not
is debatable.
I would say maliciously adjusting the clock is very bad, from a
security perspective ;-)