Git-Mirrors/privsec.dev
1
0
Fork 0
mirror of https://github.com/PrivSec-dev/privsec.dev.git synced 2025-05-02 06:16:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update Chrony configurations

Browse source
This commit is contained in:
Tommy 2023-08-08 21:08:20 -07:00 • committed by GitHub
parent 8bfc2ba1c8
commit 90dce6a30b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
content/posts/linux/Desktop Linux Hardening.md
View file

@ -388,6 +388,13 @@ If decide on using NTS with chronyd, consider using multiple, independent time p
GrapheneOS uses a [quite nice chrony configuration](https://github.com/GrapheneOS/infrastructure/blob/main/chrony.conf) for their infrastructure. I recommend that you replicate their `chrony.conf` on your system.
You should also enable the secommp filter for chronyd in `/etc/sysconfig/chronyd`:
```
# Command-line options for chronyd
OPTIONS="-F 1"
```
![Verifying NTS configuration](/images/nts.png)
### Pluggable Authentication Modules (PAM)