ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-09-21 12:38:41 +03:00
Code Issues Projects Releases Wiki Activity

ntpd: Don't answer status queries

Browse Source 
Workaround for CVE-2013-5211:

http://support.ntp.org/bin/view/Main/SecurityNotice#DRDoS_Amplification_Attack_using
This commit is contained in:
Eelco Dolstra 2014-02-03 23:41:35 +01:00
parent d451d12128
commit 9e7fe29e41
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nixos/modules/services/networking/ntpd.nix
View File

@ -15,6 +15,9 @@ let
# chroot to ${stateDir}, we have to specify it as /ntp.drift.
driftfile /ntp.drift
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
${toString (map (server: "server " + server + " iburst\n") config.services.ntp.servers)}
'';