isa/citadel
1
0
Fork 0
forked from brl/citadel
Code Pull Requests Activity

Use the name 'systemd-timesync' rather than the uid which can change

Browse Source
This commit is contained in:
Bruce Leidl 2022-09-15 12:39:56 -04:00
parent f4f1f3b153
commit ea16dd0949
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules
View File

@ -4,6 +4,6 @@
:OUTPUT DROP [0:0] :OUTPUT DROP [0:0]
-A INPUT -m state --state ESTABLISHED -j ACCEPT -A INPUT -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT -A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT
-A OUTPUT -p udp -m owner --uid-owner 996 -j ACCEPT -A OUTPUT -p udp -m owner --uid-owner systemd-timesync -j ACCEPT
-A OUTPUT -j LOG --log-uid --log-prefix 'iptables' -A OUTPUT -j LOG --log-uid --log-prefix 'iptables'
COMMIT COMMIT