doc: update description of -u option and user directive

This commit is contained in:
Miroslav Lichvar
2015-12-10 15:22:55 +01:00
parent 0a10df1cf5
commit c5265f6070
3 changed files with 25 additions and 28 deletions

View File

@@ -101,14 +101,12 @@ RTC or the RTC is broken (e.g. it has no battery).
\fB\-u\fR \fIuser\fR
This option sets the name of the system user to which \fBchronyd\fR will switch
after start in order to drop root privileges. It overrides the \fBuser\fR
directive (default \fB@DEFAULT_USER@\fR). It may be set to a non-root user
only when \fBchronyd\fR is compiled with support for Linux capabilities
(libcap), on NetBSD with the \fB/dev/clockctl\fR device or on Mac OS X.
directive from the configuration file (default \fB@DEFAULT_USER@\fR).
In the Mac OS X implementation \fBchronyd\fR forks into two processes. The
child process retains root privileges but can only perform a very limited range
of privileged system calls on behalf of the parent. The parent process drops
root privileges to run as the specified system user.
On Linux, \fBchronyd\fR needs to be compiled with support for the \fBlibcap\fR
library. On Mac OS X, FreeBSD, NetBSD and Solaris \fBchronyd\fR forks into two
processes. The child process retains root privileges, but can only perform a
very limited range of privileged system calls on behalf of the parent.
.TP
\fB\-F\fR \fIlevel\fR
This option configures a system call filter when \fBchronyd\fR is compiled with