Control: tags -1 + confirmed

On Sat, 2021-10-23 at 23:14 +0200, Vincent Blut wrote:
> chrony 4.0 allows binding the NTP, NTS-KE, client and UDP command
> sockets 
> to a specific network device using the 'binddevice', 'bindacqdevice'
> and
> 'bindcmddevice' directives.
> In Bullseye, using these directives with a network interface name
> longer
> than 3 characters (e.g. binddevice eth0) will cause chronyd to crash
> because
> of the way the system call filter handles the SO_BINDTODEVICE socket
> option.
> 
> [ Impact ]
> To bind sockets to a network interface with a "long" name, users have
> to
> disable chronyd's system call filter which is certainly not ideal.
> 

Please go ahead, thanks.

Regards,

Adam

Reply via email to