blob: bc9f1f494c7ffebe6af5405d12f19e3bd667ae1c (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
--- a/examples/chronyd.service
+++ b/examples/chronyd.service
@@ -10,7 +10,7 @@ Type=notify
PIDFile=/run/chrony/chronyd.pid
Environment="OPTIONS="
EnvironmentFile=-/etc/sysconfig/chronyd
-ExecStart=/usr/sbin/chronyd -n $OPTIONS
+ExecStart=/usr/sbin/chronyd -n $OPTIONS -u ntp -F 2
CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_KILL CAP_LEASE CAP_LINUX_IMMUTABLE
|
