So far it only has uid/gid, call chain is

main
/* Drop root privileges if the specified user has a non-zero UID */
if (!geteuid() && (pw->pw_uid || pw->pw_gid))
  SYS_DropRoot(pw->pw_uid, pw->pw_gid);
      ->
            SYS_DropRoot (maps to implementations)
          ->
                SYS_Linux_DropRoot (linux implementation)
                There also is Solaris, netbsd, MacOSX

There is an arg clock_control that can be passed, and if zero should
make it not demand cap_sys_ntp.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1589780

Title:
  chrony.service doesn't start on LXD container

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chrony/+bug/1589780/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to