openstack/ansible-hardening
Code Issues Proposed changes

Remove commandkey from chrony config

Browse Source 
Since version 2.2 chorny has removed commandkey options and
it's not a valid option for any currently supported distro.

Change-Id: I7c02cf6b7575a9ab753d85cdd6582f209f39be1b
(cherry picked from commit 037e5493b6)
This commit is contained in:
Dmitriy Rabotyagov
2023-05-23 19:00:23 +02:00
committed by Dmitriy Rabotyagov
parent d9dba5a7ca
commit 42b68b9ff7
1 changed files with 0 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
templates/chrony.conf.j2
View File

@@ -29,13 +29,6 @@ server {{ ntp_server }} {{ security_ntp_server_options }}
keyfile {{ chrony_key_file }}
# Set runtime command key. Note that if you change the key (not the
# password) to anything other than 1 you will need to edit
# /etc/ppp/ip-up.d/chrony, /etc/ppp/ip-down.d/chrony, /etc/init.d/chrony
# and /etc/cron.weekly/chrony as these scripts use it to get the password.
commandkey 1
# I moved the driftfile to /var/lib/chrony to comply with the Debian
# filesystem standard.