%global _hardened_build 1

%global clknetsim_ver 5b4d14

%global ntp2chrony_ver 982426

%bcond_without debug

Name:           chrony

Version:        3.3

Release:        3%{?dist}

Summary:        An NTP client/server

Group:          System Environment/Daemons

License:        GPLv2

URL:            https://chrony.tuxfamily.org

Source0:        https://download.tuxfamily.org/chrony/chrony-%{version}%{?prerelease}.tar.gz

Source1:        chrony.dhclient

Source2:        chrony.helper

Source3:        chrony-dnssrv@.service

Source4:        chrony-dnssrv@.timer

# simulator for test suite

Source10:       https://github.com/mlichvar/clknetsim/archive/%{clknetsim_ver}/clknetsim-%{clknetsim_ver}.tar.gz

# script for converting ntp configuration to chrony

Source11:       https://github.com/mlichvar/ntp2chrony/raw/%{ntp2chrony_ver}/ntp2chrony.py

%{?gitpatch:Patch0: chrony-%{version}%{?prerelease}-%{gitpatch}.patch.gz}

# move pidfile to /var/run/chrony to allow chronyd to remove it on exit

Patch1:         chrony-pidfile.patch

# add NTP servers from DHCP when starting service

Patch2:         chrony-service-helper.patch

# avoid blocking in getrandom system call

Patch3:         chrony-getrandom.patch

BuildRequires:  libcap-devel libedit-devel nettle-devel pps-tools-devel

%ifarch %{ix86} x86_64 %{arm} aarch64 mipsel mips64el ppc64 ppc64le s390 s390x

BuildRequires:  libseccomp-devel

%endif

BuildRequires:  gcc bison systemd

Requires(pre):  shadow-utils

%{?systemd_requires}

# install timedated implementation that can control chronyd service

Recommends:     timedatex

# suggest drivers for hardware reference clocks

Suggests:       ntp-refclock

%description

chrony is a versatile implementation of the Network Time Protocol (NTP).

It can synchronise the system clock with NTP servers, reference clocks

(e.g. GPS receiver), and manual input using wristwatch and keyboard. It

can also operate as an NTPv4 (RFC 5905) server and peer to provide a time

service to other computers in the network.

%if 0%{!?vendorzone:1}

%global vendorzone %(source /etc/os-release && echo ${ID}.)

%endif

%prep

%setup -q -n %{name}-%{version}%{?prerelease} -a 10

%{?gitpatch:%patch0 -p1}

%patch1 -p1 -b .pidfile

%patch2 -p1 -b .service-helper

%patch3 -p1 -b .getrandom

%{?gitpatch: echo %{version}-%{gitpatch} > version.txt}

# review changes in packaged configuration files and scripts

md5sum -c <<-EOF | (! grep -v 'OK$')

        47ad7eccc410b981d2f2101cf5682616  examples/chrony-wait.service

        e473a9fab7fe200cacce3dca8b66290b  examples/chrony.conf.example2

        ba6bb05c50e03f6b5ab54a2b7914800d  examples/chrony.keys.example

        6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate

        63e0781f84e89ba6029d93ef0722c4ce  examples/chrony.nm-dispatcher

        921b354e94f5e3db124cb50d11cd560f  examples/chronyd.service

EOF

# don't allow packaging without vendor zone

test -n "%{vendorzone}"

# use example chrony.conf as the default config with some modifications:

# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)

# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata

# - enable keyfile

sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \

    -e 's|#\(leapsectz\)|\1|' \

    -e 's|#\(keyfile\)|\1|' \

        < examples/chrony.conf.example2 > chrony.conf

touch -r examples/chrony.conf.example2 chrony.conf

# regenerate the file from getdate.y

rm -f getdate.c

mv clknetsim-%{clknetsim_ver}* test/simulation/clknetsim

install -m 644 -p %{SOURCE11} ntp2chrony.py

%build

%configure \

%{?with_debug: --enable-debug} \

        --enable-ntp-signd \

        --enable-scfilter \

        --docdir=%{_docdir} \

        --with-ntp-era=$(date -d '1970-01-01 00:00:00+00:00' +'%s') \

        --with-user=chrony \

        --with-hwclockfile=%{_sysconfdir}/adjtime \

        --with-sendmail=%{_sbindir}/sendmail

make %{?_smp_mflags}

%install

make install DESTDIR=$RPM_BUILD_ROOT

rm -rf $RPM_BUILD_ROOT%{_docdir}

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{sysconfig,logrotate.d}

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/{lib,log}/chrony

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d

mkdir -p $RPM_BUILD_ROOT%{_libexecdir}

mkdir -p $RPM_BUILD_ROOT{%{_unitdir},%{_prefix}/lib/systemd/ntp-units.d}

install -m 644 -p chrony.conf $RPM_BUILD_ROOT%{_sysconfdir}/chrony.conf

install -m 640 -p examples/chrony.keys.example \

        $RPM_BUILD_ROOT%{_sysconfdir}/chrony.keys

install -m 755 -p examples/chrony.nm-dispatcher \

        $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony

install -m 755 -p %{SOURCE1} \

        $RPM_BUILD_ROOT%{_sysconfdir}/dhcp/dhclient.d/chrony.sh

install -m 644 -p examples/chrony.logrotate \

        $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/chrony

install -m 644 -p examples/chronyd.service \

        $RPM_BUILD_ROOT%{_unitdir}/chronyd.service

install -m 644 -p examples/chrony-wait.service \

        $RPM_BUILD_ROOT%{_unitdir}/chrony-wait.service

install -m 644 -p %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.service

install -m 644 -p %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/chrony-dnssrv@.timer

install -m 755 -p %{SOURCE2} $RPM_BUILD_ROOT%{_libexecdir}/chrony-helper

cat > $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/chronyd <

# Command-line options for chronyd

OPTIONS=""

EOF

touch $RPM_BUILD_ROOT%{_localstatedir}/lib/chrony/{drift,rtc}

echo 'chronyd.service' > \

        $RPM_BUILD_ROOT%{_prefix}/lib/systemd/ntp-units.d/50-chronyd.list

%check

# set random seed to get deterministic results

export CLKNETSIM_RANDOM_SEED=24502

make %{?_smp_mflags} -C test/simulation/clknetsim

make quickcheck

%pre

getent group chrony > /dev/null || /usr/sbin/groupadd -r chrony

getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \

       -d %{_localstatedir}/lib/chrony -s /sbin/nologin chrony

:

%post

# fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2

if grep -q 'PIDFile=%{_localstatedir}/run/chronyd.pid' \

                %{_sysconfdir}/systemd/system/chronyd.service 2> /dev/null && \

        ! grep -qi '^[ '$'\t'']*pidfile' %{_sysconfdir}/chrony.conf 2> /dev/null

then

        sed -i '/PIDFile=/s|/run/|/run/chrony/|' \

                %{_sysconfdir}/systemd/system/chronyd.service

fi

# workaround for late reload of unit file (#1614751)

%{_bindir}/systemctl daemon-reload

%systemd_post chronyd.service chrony-wait.service

%preun

%systemd_preun chronyd.service chrony-wait.service

%postun

%systemd_postun_with_restart chronyd.service

%files

%{!?_licensedir:%global license %%doc}

%license COPYING

%doc FAQ NEWS README ntp2chrony.py

%config(noreplace) %{_sysconfdir}/chrony.conf

%config(noreplace) %verify(not md5 size mtime) %attr(640,root,chrony) %{_sysconfdir}/chrony.keys

%config(noreplace) %{_sysconfdir}/logrotate.d/chrony

%config(noreplace) %{_sysconfdir}/sysconfig/chronyd

%{_sysconfdir}/NetworkManager/dispatcher.d/20-chrony

%{_sysconfdir}/dhcp/dhclient.d/chrony.sh

%{_bindir}/chronyc

%{_sbindir}/chronyd

%{_libexecdir}/chrony-helper

%{_prefix}/lib/systemd/ntp-units.d/*.list

%{_unitdir}/chrony*.service

%{_unitdir}/chrony*.timer

%{_mandir}/man[158]/%{name}*.[158]*

%dir %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony

%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/drift

%ghost %attr(-,chrony,chrony) %{_localstatedir}/lib/chrony/rtc

%dir %attr(-,chrony,chrony) %{_localstatedir}/log/chrony

%changelog

* Mon Aug 13 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-3

- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2

  (#1614800)

- add workaround for late reload of unit file (#1614751)

* Mon Jun 18 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-2

- move pidfile to /var/run/chrony to allow chronyd to remove it on exit

  (#1584585)

- avoid blocking in getrandom system call (#1592425)

* Thu Apr 05 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-1

- update to 3.3

- enable keyfile by default again

- update ntp2chrony script

* Mon Mar 19 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.2.pre1

- include ntp2chrony script in documentation (#1530987)

* Thu Mar 15 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-0.1.pre1

- update to 3.3-pre1

- switch to nettle for crypto hashing

- add gcc to build requirements

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Tue Jan 30 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-3

- use systemd macro for scriptlet dependencies

* Thu Jan 25 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.2-2

- fix chronyc getting stuck in infinite loop after clock step

- don't allow packaging without vendor zone

- suggest ntp-refclock

- remove obsolete dependency

- update description

* Fri Sep 15 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-1

- update to 3.2

- get TAI-UTC offset and leap seconds from tzdata by default

* Tue Aug 29 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.4.pre2

- update to 3.2-pre2

* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.3.pre1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.2.pre1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Tue Jul 25 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-0.1.pre1

- update to 3.2-pre1

* Thu May 04 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-5

- check PEERNTP variable before loading existing dhclient files

* Thu Apr 20 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-4

- use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)

- fix seccomp filter for new glibc once again

- don't drop PHC samples with zero delay

* Mon Mar 13 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-3

- fix seccomp filter for new glibc

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Tue Jan 31 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-1

- update to 3.1

- enable seccomp support on more archs

- package chronyd sysconfig file

* Tue Jan 24 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.1-0.1.pre1

- update to 3.1-pre1

* Mon Jan 16 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-1

- update to 3.0

* Fri Jan 06 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.3.pre3

- update to 3.0-pre3

* Thu Dec 15 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.2.pre2

- update to 3.0-pre2

- enable support for MS-SNTP authentication in Samba

* Fri Dec 09 2016 Miroslav Lichvar <mlichvar@redhat.com> 3.0-0.1.pre1

- update to 3.0-pre1

* Mon Nov 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4.1-1

- update to 2.4.1

* Thu Oct 27 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-4

- avoid AVC denials in chrony-wait service (#1350815)

* Tue Sep 13 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-3

- fix chrony-helper to escape names of systemd units (#1374767)

* Tue Jun 28 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-2

- fix chrony-helper to exit with correct status (#1350531)

* Tue Jun 07 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-1

- update to 2.4

- don't require info

* Mon May 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.4-0.1.pre1

- update to 2.4-pre1

- extend chrony-helper to allow management of static sources (#1331655)

* Tue Feb 16 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-1

- update to 2.3

* Tue Feb 02 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.3-0.1.pre1

- update to 2.3-pre1

* Thu Jan 21 2016 Miroslav Lichvar <mlichvar@redhat.com> 2.2.1-1

- update to 2.2.1 (CVE-2016-1567)

- set NTP era split explicitly

* Mon Oct 19 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-1

- update to 2.2

* Fri Oct 09 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.2.pre2

- update to 2.2-pre2

- require libseccomp-devel on supported archs only

* Fri Oct 02 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1

- update to 2.2-pre1

- enable seccomp support

- use weak dependency for timedatex on Fedora 24 and later

* Tue Jun 23 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1.1-1

- update to 2.1.1

- add -n option to gzip command to not save timestamp

* Mon Jun 22 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-1

- update to 2.1

- extend chrony-helper to allow using servers from DNS SRV records (#1234406)

- set random seed in testing to get deterministic results

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.2.pre1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Wed Jun 10 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.1-0.1.pre1

- update to 2.1-pre1

* Mon Apr 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-1

- update to 2.0

* Wed Apr 08 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.3.pre2

- update to 2.0-pre2 (CVE-2015-1853 CVE-2015-1821 CVE-2015-1822)

* Thu Jan 29 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.2.pre1

- require timedatex (#1136905)

* Tue Jan 27 2015 Miroslav Lichvar <mlichvar@redhat.com> 2.0-0.1.pre1

- update to 2.0-pre1

* Thu Sep 11 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-1

- update to 1.31

- add servers from DHCP with iburst option by default

- use upstream configuration files and scripts

- don't package configuration examples

- compress chrony.txt

* Thu Aug 21 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.31-0.1.pre1

- update to 1.31-pre1

- use license macro if available

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.30-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Aug 15 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-2

- reconnect client sockets (#1124059)

* Tue Jul 01 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-1

- update to 1.30

- enable debug messages

* Mon Jun 09 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1

- update to 1.30-pre1

- execute test suite

- avoid calling systemctl in helper script

- call chronyc directly from logrotate and NM dispatcher scripts

- add conflict with systemd-timesyncd service

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.29.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Fri Jan 31 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1

- update to 1.29.1 (CVE-2014-0021)

- replace hardening build flags with _hardened_build

* Tue Nov 19 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-3

- let systemd remove pid file (#974305)

* Thu Oct 03 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-2

- add ordering dependency to not start chronyd before ntpd stopped

* Thu Aug 08 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.29-1

- update to 1.29 (CVE-2012-4502, CVE-2012-4503)

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.28-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Wed Jul 17 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-1

- update to 1.28

- change default makestep limit to 10 seconds

* Mon Jun 24 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.2.pre1

- buildrequire systemd-units

* Fri Jun 21 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.28-0.1.pre1

- update to 1.28-pre1

- listen for commands only on localhost by default

* Thu May 09 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-3

- disable chrony-wait service by default (#961047)

- drop old systemd scriptlets

- don't own ntp-units.d directory

- move files from /lib

- remove unncessary dependency on syslog target

* Tue Mar 12 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-2

- suppress error messages from tr when generating key (#907914)

- fix delta calculation with extreme frequency offsets

* Fri Feb 01 2013 Miroslav Lichvar <mlichvar@redhat.com> 1.27-1

- update to 1.27

- start chrony-wait service with chronyd

- start chronyd service after sntp

- remove obsolete macros

* Tue Sep 11 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844

- update to git snapshot 1ca844

- update systemd integration (#846303)

- use systemd macros if available (#850151)

- use correct vendor pool.ntp.org zone on RHEL (#845981)

- don't log output of chrony-wait service

* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.27-0.4.pre1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Fri Apr 27 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.3.pre1

- update service file for systemd-timedated-ntp target (#816493)

* Fri Apr 06 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.2.pre1

  use systemctl is-active instead of status in chrony-helper (#794771)

* Tue Feb 28 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.1.pre1

- update to 1.27-pre1

- generate SHA1 command key instead of MD5

* Wed Feb 15 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-6.20110831gitb088b7

- remove old servers on DHCP update (#787042)

* Fri Feb 10 2012 Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7

- improve chrony-helper to keep track of servers added from DHCP (#787042)

- fix dhclient script to always return with zero exit code (#767859)

* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.26-4.20110831gitb088b7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Tue Sep 06 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7

- update to git snapshot 20110831gitb088b7

- on first start generate password with 16 chars

- change systemd service type to forking

- add forced-command to chrony-helper (#735821)

* Mon Aug 15 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-2

- fix iburst with very high jitters and long delays

- use timepps header from pps-tools-devel

* Wed Jul 13 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-1

- update to 1.26

- read options from sysconfig file if it exists

* Fri Jun 24 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1

- update to 1.26-pre1

- fix service name in %%triggerun

- drop SysV init script

- add chrony-wait service

* Fri May 06 2011 Bill Nottingham <notting@redhat.com> 1.25-2

- fix systemd scriptlets for the upgrade case

* Wed May 04 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-1

- update to 1.25

* Wed Apr 20 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.3.pre2

- update to 1.25-pre2

- link with -Wl,-z,relro,-z,now options

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.25-0.2.pre1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Tue Feb 01 2011 Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1

- update to 1.25-pre1

- use iburst, four pool servers, rtcsync, stratumweight in default config

- add systemd support

- drop sysconfig file 

- suppress install-info errors

* Thu Apr 29 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775

- update to 20100428git73d775

- replace initstepslew directive with makestep in default config

- add NetworkManager dispatcher script

- add dhclient script

- retry server/peer name resolution at least once to workaround

  NetworkManager race condition on boot

- don't verify chrony.keys

* Fri Mar 12 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-3.20100302git5fb555

- update to snapshot 20100302git5fb555

- compile with PPS API support

* Thu Feb 04 2010 Miroslav Lichvar <mlichvar@redhat.com> 1.24-1

- update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)

- modify default config

  - step clock on start if it is off by more than 100 seconds

  - disable client log

- build with -fPIE on sparc

* Tue Dec 15 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.24-0.1.pre1

- update to 1.24-pre1

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-7.20081106gitbe42b4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Fri Jul 17 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-6.20081106gitbe42b4

- switch to editline

- support arbitrary chronyc commands in init script

* Mon Jun 08 2009 Dan Horak <dan[at]danny.cz> 1.23-5.20081106gitbe42b4

- add patch with support for s390/s390x

* Mon Mar 09 2009 Miroslav Lichvar <mlichvar@redhat.com> 1.23-4.20081106gitbe42b4

- fix building with broken libcap header (#483548)

* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.23-3.20081106gitbe42b4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Wed Nov 19 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4

- fix info uninstall

- generate random command key in init script

- support cyclelogs, online, offline commands in init script

- add logrotate script

* Tue Nov 11 2008 Miroslav Lichvar <mlichvar@redhat.com> 1.23-1.20081106gitbe42b4

- initial release