From ea16dd094914fa44e4f991b1b4c8f7801c1de26b Mon Sep 17 00:00:00 2001 From: Bruce Leidl Date: Thu, 15 Sep 2022 12:39:56 -0400 Subject: [PATCH] Use the name 'systemd-timesync' rather than the uid which can change --- meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules b/meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules index 8b2b035..50ee82f 100644 --- a/meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules +++ b/meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules @@ -4,6 +4,6 @@ :OUTPUT DROP [0:0] -A INPUT -m state --state ESTABLISHED -j ACCEPT -A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT --A OUTPUT -p udp -m owner --uid-owner 996 -j ACCEPT +-A OUTPUT -p udp -m owner --uid-owner systemd-timesync -j ACCEPT -A OUTPUT -j LOG --log-uid --log-prefix 'iptables' COMMIT