summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2014-01-10 11:40:34 -0500
committerjim-p <jimp@pfsense.org>2014-01-10 11:41:49 -0500
commit706ba0e4b1ccf498dbfa3a99073d249045b1a7b8 (patch)
treefcf66ef5d3c11772d4334312aaff2451194725bd /etc/inc
parentc349f263d0cc22a198634f95a068a5e814290fa3 (diff)
downloadpfsense-706ba0e4b1ccf498dbfa3a99073d249045b1a7b8.zip
pfsense-706ba0e4b1ccf498dbfa3a99073d249045b1a7b8.tar.gz
Use "disable monitor" in NTP config to mitigate CVE-2013-5211.
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/system.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc
index cbc5a41..741ae71 100644
--- a/etc/inc/system.inc
+++ b/etc/inc/system.inc
@@ -1382,7 +1382,7 @@ function system_ntp_configure($start_ntpd=true) {
foreach (explode(' ', $config['system']['timeservers']) as $ts)
$ntpcfg .= "server {$ts} iburst maxpoll 9\n";
- $ntpcfg .= "enable monitor\n";
+ $ntpcfg .= "disable monitor\n";
$ntpcfg .= "enable stats\n";
$ntpcfg .= "statistics clockstats\n";
$ntpcfg .= "statsdir {$statsdir}\n";
OpenPOWER on IntegriCloud