From db0fc992c0f1e3f1ab6f099b07b933bfca07d520 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Wed, 29 Mar 2023 21:05:06 +0200
Subject: ntp: T3008: start daemon with extended privileges but then drop to
 _chrony

---
 data/templates/chrony/override.conf.j2 | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'data/templates/chrony/override.conf.j2')

diff --git a/data/templates/chrony/override.conf.j2 b/data/templates/chrony/override.conf.j2
index 0ab8f0824..b8935ae76 100644
--- a/data/templates/chrony/override.conf.j2
+++ b/data/templates/chrony/override.conf.j2
@@ -5,10 +5,9 @@ ConditionPathExists={{ config_file }}
 After=vyos-router.service
 
 [Service]
-User=root
 EnvironmentFile=
 ExecStart=
-ExecStart={{ vrf_command }}/usr/sbin/chronyd -F 1 -f {{ config_file }}
+ExecStart=!{{ vrf_command }}/usr/sbin/chronyd -F 1 -f {{ config_file }}
 PIDFile=
 PIDFile={{ config_file | replace('.conf', '.pid') }}
 Restart=always
-- 
cgit v1.2.3