mirror of
git://slackware.nl/current.git
synced 2025-01-15 15:41:54 +01:00
0e307de269
patches/packages/openssl-1.1.1za-x86_64-1_slack15.0.txz: Upgraded.
Apply patches to fix CVEs that were fixed by the 1.1.1{x,y,za} releases that
were only available to subscribers to OpenSSL's premium extended support.
These patches were prepared by backporting commits from the OpenSSL-3.0 repo.
The reported version number has been updated so that vulnerability scanners
calm down. All of these issues were considered to be of low severity.
Thanks to Ken Zalewski for the patches!
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-5678
https://www.cve.org/CVERecord?id=CVE-2024-0727
https://www.cve.org/CVERecord?id=CVE-2024-2511
https://www.cve.org/CVERecord?id=CVE-2024-4741
https://www.cve.org/CVERecord?id=CVE-2024-5535
(* Security fix *)
patches/packages/openssl-solibs-1.1.1za-x86_64-1_slack15.0.txz: Upgraded.
84 lines
2.7 KiB
Text
84 lines
2.7 KiB
Text
# Sample /etc/ntp.conf: Configuration file for ntpd.
|
|
|
|
#
|
|
# Undisciplined Local Clock. This is a fake driver intended for backup
|
|
# and when no outside source of synchronized time is available. The
|
|
# default stratum is usually 3, but in this case we elect to use stratum
|
|
# 10. Since the server line does not have the prefer keyword, this driver
|
|
# is never used for synchronization, unless no other other
|
|
# synchronization source is available. In case the local host is
|
|
# controlled by some external source, such as an external oscillator or
|
|
# another protocol, the prefer keyword would cause the local host to
|
|
# disregard all other synchronization sources, unless the kernel
|
|
# modifications are in use and declare an unsynchronized condition.
|
|
#
|
|
server 127.127.1.0 # local clock
|
|
fudge 127.127.1.0 stratum 10
|
|
|
|
#
|
|
# NTP server (list one or more) to synchronize with:
|
|
#server 0.pool.ntp.org iburst
|
|
#server 1.pool.ntp.org iburst
|
|
#server 2.pool.ntp.org iburst
|
|
#server 3.pool.ntp.org iburst
|
|
|
|
#
|
|
# Full path of a directory where statistics files should be created
|
|
#
|
|
statsdir /var/lib/ntp/stats
|
|
|
|
#
|
|
# Location of an alternate log file to be used instead of the default system syslog(3) facility.
|
|
# This is not enabled by default, because ntpd has to be restarted when the logs are rotated
|
|
# which causes unnecessary network traffic as ntpd resynchronizes.
|
|
#
|
|
#logfile /var/log/ntp
|
|
|
|
#
|
|
# Drift file. Put this in a directory which the daemon can write to.
|
|
# No symbolic links allowed, either, since the daemon updates the file
|
|
# by creating a temporary in the same directory and then rename()'ing
|
|
# it to the file.
|
|
#
|
|
driftfile /var/lib/ntp/drift
|
|
|
|
#
|
|
# Location of PID file
|
|
#
|
|
pidfile /var/run/ntpd.pid
|
|
|
|
#
|
|
# Uncomment to use a multicast NTP server on the local subnet:
|
|
#multicastclient 224.0.1.1 # listen on default 224.0.1.1
|
|
# Set an optional compensation for broadcast packet delay:
|
|
#broadcastdelay 0.008
|
|
|
|
#
|
|
# Keys file. If you want to diddle your server at run time, make a
|
|
# keys file (mode 640 owned by root:ntp) and define the key number to
|
|
# be used for making requests.
|
|
# PLEASE DO NOT USE THE DEFAULT VALUES HERE. Pick your own, or remote
|
|
# systems might be able to reset your clock at will.
|
|
#
|
|
#keysdir /etc
|
|
#keys /etc/ntp.keys
|
|
#trustedkey 65535
|
|
#requestkey 65535
|
|
#controlkey 65535
|
|
|
|
#
|
|
# Don't serve time or stats to anyone else by default (more secure)
|
|
restrict default limited kod nomodify notrap nopeer noquery
|
|
restrict -6 default limited kod nomodify notrap nopeer noquery
|
|
|
|
#
|
|
# Use these lines instead if you do want to serve time and stats to
|
|
# other machines on the network:
|
|
#restrict default limited kod nomodify notrap nopeer
|
|
#restrict -6 default limited kod nomodify notrap nopeer
|
|
|
|
#
|
|
# Trust ourselves. :-)
|
|
restrict 127.0.0.1
|
|
restrict ::1
|
|
|