[Sugar-devel] Clocks on XOs
Bernie Innocenti
bernie at codewiz.org
Sat Jul 3 09:54:16 EDT 2010
El Fri, 02-07-2010 a las 20:15 -0700, Hal Murray escribió:
> Is that one of the old XOs that had troubles with the tiny battery feeding
> the TOY/RTC clock when the main battery and wall power are both disconnected?
> I forget the details, but I think there was a problem with the battery
> holder.
Likely so, but the software should be able to compensate for it. After
discussing it on IRC, it seems that olpc-update-query should
automatically update the clock from the OATS server.
> NetworkManager used to call ntpdate when it setup a connection. Was that an
> OLPC addition?
We figured out that the ntp package has never been present on the XO
images.
> I think this area gets tangled up with security and lease checking. Do we
> want/need two separate modes, one for the secure case and another for
> developers without a school server?
Maybe.
We discussed the security implications of using unauthenticated ntp on
XOs with anti-theft enabled yesterday on IRC. The concern is that a
clever thief could setup a LAN with DHCP, DNS and NTP to set a date in
te past and thus subvert the leases expiration scheme.
However, with root access on the laptop, one does not need to bother so
much: they could simply change the time from the console or, better,
in /etc/rc.local.
There's no way to practical way to implement effective anti-theft
without taking away root from the user. And once we take away root
access, we've also taken away olpc's principle #1: child ownership.
> What are the school servers doing to keep their clocks reasonable?
They're using ntp, with the Fedora pool of ntp servers.
> > Why aren't we using ntp?
>
> ntp is probably overkill for XOs. Besides, who would want to give up that
> much ram? On top of that, ntpd doesn't get along with power saving mode.
Wow, 2MB of RSS! I had no idea ntp was such a hog.
> Aside from quirks like this one, is time on the XO normally good enough?
I would have to check...
--
// Bernie Innocenti - http://codewiz.org/
\X/ Sugar Labs - http://sugarlabs.org/
More information about the Sugar-devel
mailing list