Question regarding ntpd
L. A. Walsh
lkml at tlinx.org
Mon Oct 10 21:48:23 UTC 2016
Steve Grubb wrote:
> But ntpd overwhelms logs but chronyd might be marginally better. See bz
> https://bugzilla.redhat.com/show_bug.cgi?id=918127
>
---
I took a gander at said bugzilla num, and found a minor surprise in that
there
Miroslav Lichvar said:
"You can use ntpd from the ntp package instead of chrony, it
shouldn't call adjtimex as often as chronyd does."
---
I.e. the exact opposite of your (Steve)'s statement. Wondered if that was
a misread or newer information...<*idle curiosity*>.
Either way sounds like it would be "nice" to differentiate a "read" from
a "write" in this syscall if it is to be useful.
-l
More information about the Linux-audit
mailing list