diff options
| author | jim-p <jimp@pfsense.org> | 2014-01-10 11:40:34 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2014-01-10 11:41:26 -0500 |
| commit | 3e1460899dd029fa7ad80695e5f40e39477fb802 (patch) | |
| tree | cb85c9e4fa2c384c10b6ecb6b0c48958e22b942a /etc/inc/system.inc | |
| parent | 43656206a0c9a728693272f13719c7b22e61af2e (diff) | |
| download | pfsense-3e1460899dd029fa7ad80695e5f40e39477fb802.zip pfsense-3e1460899dd029fa7ad80695e5f40e39477fb802.tar.gz | |
Use "disable monitor" in NTP config to mitigate CVE-2013-5211.
Diffstat (limited to 'etc/inc/system.inc')
| -rw-r--r-- | etc/inc/system.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index 6cc7724..1960461 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -1309,7 +1309,7 @@ function system_ntp_configure($start_ntpd=true) { foreach (explode(' ', $config['system']['timeservers']) as $ts) $ntpcfg .= "server {$ts} iburst maxpoll 9\n"; - $ntpcfg .= "enable monitor\n"; + $ntpcfg .= "disable monitor\n"; $ntpcfg .= "enable stats\n"; $ntpcfg .= "statistics clockstats\n"; $ntpcfg .= "statsdir {$statsdir}\n"; |
