Use the name 'systemd-timesync' rather than the uid which can change

This commit is contained in:
Bruce Leidl 2022-09-15 12:39:56 -04:00
parent f4f1f3b153
commit ea16dd0949

View File

@ -4,6 +4,6 @@
:OUTPUT DROP [0:0] :OUTPUT DROP [0:0]
-A INPUT -m state --state ESTABLISHED -j ACCEPT -A INPUT -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT -A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT
-A OUTPUT -p udp -m owner --uid-owner 996 -j ACCEPT -A OUTPUT -p udp -m owner --uid-owner systemd-timesync -j ACCEPT
-A OUTPUT -j LOG --log-uid --log-prefix 'iptables' -A OUTPUT -j LOG --log-uid --log-prefix 'iptables'
COMMIT COMMIT