Both bug 688971 and bug 768803 are rooted in an incorrect control file. The control file says:

Build-Depends: debhelper (>= 9),
 texinfo, bison,
 libedit-dev,
 libnss3-dev,
 libtomcrypt-dev

This build-dep list is incomplete. In order to enable the program to drop root privileges, the libcap-dev build-time dependency has to be added. If that package (and its dependencies) are installed at build time, then ./configure reports

  Checking for linuxcaps : Yes

and "config.h" will contain

  #define FEAT_LINUXCAPS 1

which is what SYS_DropRoot() needs in "sys.c".

(The runtime dependency is libcap2.)

The package should also add a system account called "chrony" at installation time, and pass "-u chrony" in the init script by default. In general /etc/default/chrony would be appreciated; for example option "-4" is something people might want to set.

Thanks,
Laszlo


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to