mirror of
https://gitlab.com/chrony/chrony.git
synced 2025-12-07 12:55:07 -05:00
doc: update description of -u option and user directive
This commit is contained in:
12
chronyd.8.in
12
chronyd.8.in
@@ -101,14 +101,12 @@ RTC or the RTC is broken (e.g. it has no battery).
|
||||
\fB\-u\fR \fIuser\fR
|
||||
This option sets the name of the system user to which \fBchronyd\fR will switch
|
||||
after start in order to drop root privileges. It overrides the \fBuser\fR
|
||||
directive (default \fB@DEFAULT_USER@\fR). It may be set to a non-root user
|
||||
only when \fBchronyd\fR is compiled with support for Linux capabilities
|
||||
(libcap), on NetBSD with the \fB/dev/clockctl\fR device or on Mac OS X.
|
||||
directive from the configuration file (default \fB@DEFAULT_USER@\fR).
|
||||
|
||||
In the Mac OS X implementation \fBchronyd\fR forks into two processes. The
|
||||
child process retains root privileges but can only perform a very limited range
|
||||
of privileged system calls on behalf of the parent. The parent process drops
|
||||
root privileges to run as the specified system user.
|
||||
On Linux, \fBchronyd\fR needs to be compiled with support for the \fBlibcap\fR
|
||||
library. On Mac OS X, FreeBSD, NetBSD and Solaris \fBchronyd\fR forks into two
|
||||
processes. The child process retains root privileges, but can only perform a
|
||||
very limited range of privileged system calls on behalf of the parent.
|
||||
.TP
|
||||
\fB\-F\fR \fIlevel\fR
|
||||
This option configures a system call filter when \fBchronyd\fR is compiled with
|
||||
|
||||
Reference in New Issue
Block a user