chrony.service

This unit is provided by:

• https://packages.debian.org/unstable/chrony

Options

• [Install]
  • Alias=chronyd.service
  • WantedBy=multi-user.target
• [Service]
  • CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE ~CAP_BLOCK_SUSPEND CAP_KILL CAP_LEASE CAP_LINUX_IMMUTABLE ~CAP_MAC_ADMIN CAP_MAC_OVERRIDE CAP_MKNOD CAP_SYS_ADMIN ~CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_MODULE CAP_SYS_PACCT ~CAP_SYS_PTRACE CAP_SYS_RAWIO CAP_SYS_TTY_CONFIG CAP_WAKE_ALARM
  • ConfigurationDirectory=chrony
  • DeviceAllow=char-pps rw char-ptp rw char-rtc rw
  • DevicePolicy=closed
  • EnvironmentFile=-/etc/default/chrony
  • ExecStart=!/usr/sbin/chronyd $DAEMON_OPTS
  • LockPersonality
    Introduced in systemd 235
    =yes
  • LogsDirectory=chrony
  • LogsDirectoryMode=0750
  • MemoryDenyWriteExecute
    Introduced in systemd 231
    =yes
  • NoNewPrivileges
    Introduced in systemd 239
    =yes no
  • PIDFile=/run/chrony/chronyd.pid
  • PrivateTmp=yes
  • ProcSubset
    Introduced in systemd 247
    =pid
  • ProtectControlGroups
    Introduced in systemd 232
    =yes
  • ProtectHome
    Introduced in systemd 214
    =yes
  • ProtectHostname
    Introduced in systemd 242
    =yes
  • ProtectKernelLogs
    Introduced in systemd 244
    =yes
  • ProtectKernelModules
    Introduced in systemd 232
    =yes
  • ProtectKernelTunables
    Introduced in systemd 232
    =yes
  • ProtectProc
    Introduced in systemd 247
    =invisible
  • ProtectSystem
    Introduced in systemd 214
    =strict
  • ReadWritePaths=/run -/var/spool
  • RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
  • RestrictNamespaces
    Introduced in systemd 233
    =yes
  • RestrictSUIDSGID
    Introduced in systemd 242
    =yes
  • RuntimeDirectory=chrony
  • RuntimeDirectoryMode=0700
  • RuntimeDirectoryPreserve=restart
  • StateDirectory=chrony
  • StateDirectoryMode=0750
  • SystemCallArchitectures=native
  • SystemCallFilter=~@cpu-emulation @debug @module @mount @obsolete @raw-io @reboot @swap
  • Type=forking
  • User=_chrony
• [Unit]
  • After=network.target
  • Before=time-sync.target
  • ConditionCapability=CAP_SYS_TIME
  • Conflicts=openntpd.service ntp.service ntpsec.service
  • Description=chrony, an NTP client/server
  • Documentation=man:chronyd(8) man:chronyc(1) man:chrony.conf(5)
  • Wants=time-sync.target

Additionnal notes

Nothing here.