diff options
| author | jim-p <jimp@pfsense.org> | 2014-01-10 11:40:34 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2014-01-10 11:41:49 -0500 |
| commit | 706ba0e4b1ccf498dbfa3a99073d249045b1a7b8 (patch) | |
| tree | fcf66ef5d3c11772d4334312aaff2451194725bd /etc/inc/system.inc | |
| parent | c349f263d0cc22a198634f95a068a5e814290fa3 (diff) | |
| download | pfsense-706ba0e4b1ccf498dbfa3a99073d249045b1a7b8.zip pfsense-706ba0e4b1ccf498dbfa3a99073d249045b1a7b8.tar.gz | |
Use "disable monitor" in NTP config to mitigate CVE-2013-5211.
Diffstat (limited to 'etc/inc/system.inc')
| -rw-r--r-- | etc/inc/system.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index cbc5a41..741ae71 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -1382,7 +1382,7 @@ function system_ntp_configure($start_ntpd=true) { foreach (explode(' ', $config['system']['timeservers']) as $ts) $ntpcfg .= "server {$ts} iburst maxpoll 9\n"; - $ntpcfg .= "enable monitor\n"; + $ntpcfg .= "disable monitor\n"; $ntpcfg .= "enable stats\n"; $ntpcfg .= "statistics clockstats\n"; $ntpcfg .= "statsdir {$statsdir}\n"; |
