Skip to main content
added 131 characters in body
Source Link
klanomath
  • 67k
  • 10
  • 135
  • 204

Instead of disabling ntpdntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpdntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patchpatch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the patch -p1 command to actually patch the file). After applying this patch, you will be able to just run ./configure && make"./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin//usr/sbin/ and /usr/bin//usr/bin/).

EditFor Mac OS X 10.7 (Lion):

mkdir ntpd-fix
cd ntpd-fix
curl http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8.tar.gz | tar zxf -
cd ntp-4.2.8/ntpd
curl http://bugs.ntp.org/attachment.cgi?id=1165 | patch -p1
cd ..
./configure && make

Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

/usr/bin/sntp  
/usr/bin/ntp-keygen  
/usr/bin/ntpq  
/usr/sbin/ntpdc  
/usr/sbin/ntpdate  
/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chownchown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

sudo chown root:wheel /usr/sbin/ntpd

Note: I did not use sudo make install because I didn't trust the Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the patch -p1 command to actually patch the file). After applying this patch, you will be able to just run ./configure && make Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

Note: I did not use sudo make install because I didn't trust the Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org and apply the patch for OS X/FreeBSD. After applying this patch, you will be able to just run "./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

For Mac OS X 10.7 (Lion):

mkdir ntpd-fix
cd ntpd-fix
curl http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8.tar.gz | tar zxf -
cd ntp-4.2.8/ntpd
curl http://bugs.ntp.org/attachment.cgi?id=1165 | patch -p1
cd ..
./configure && make

Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp  
/usr/bin/ntp-keygen  
/usr/bin/ntpq  
/usr/sbin/ntpdc  
/usr/sbin/ntpdate  
/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

Note: I did not use sudo make install because I didn't trust the Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)

Note added.
Source Link
MelB
  • 101
  • 2

Instead of disabling ntpdntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpdntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the "patch -p1"patch -p1 command to actually patch the file). After applying this patch, you will be able to just run "./configure && make."./configure && make Then you can copy the binaries to appropriate directories (/usr/sbin//usr/sbin/ and /usr/bin//usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chownchown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

Note: I did not use

sudo make install

sudo make install because I didn't trust itthe Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the "patch -p1" command to actually patch the file). After applying this patch, you will be able to just run "./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

I did not use

sudo make install

because I didn't trust it (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot). Manually moving 6 files is not a big issue.

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the patch -p1 command to actually patch the file). After applying this patch, you will be able to just run ./configure && make Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

Note: I did not use sudo make install because I didn't trust the Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)

added 595 characters in body
Source Link
MelB
  • 101
  • 2

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the "patch -p1" command to actually patch the file). After applying this patch, you will be able to just run "./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

I did not use

sudo make install

because I didn't trust it (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot). Manually moving 6 files is not a big issue.

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the "patch -p1" command to actually patch the file). After applying this patch, you will be able to just run "./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.

I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.

To compile ntpd, download the source from ntp.org ( http://www.ntp.org/downloads.html ) and apply the patch for OS X/FreeBSD available here: http://bugs.ntp.org/show_bug.cgi?id=2697 (It's in the "Attachments" section; "Patch for ntpd_io.c" link; use the "patch -p1" command to actually patch the file). After applying this patch, you will be able to just run "./configure && make." Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).

Edit: Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.

/usr/bin/sntp

/usr/bin/ntp-keygen

/usr/bin/ntpq

/usr/sbin/ntpdc

/usr/sbin/ntpdate

/usr/sbin/ntpd

Rename old ones using something like:

sudo mv /usr/sbin/ntpd /usr/sbin/ntpd.old

and then move the new one in. Make sure to chown the files after moving them in place:

sudo chown root:wheel /usr/sbin/ntpd

I did not use

sudo make install

because I didn't trust it (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot). Manually moving 6 files is not a big issue.

edited body
Source Link
MelB
  • 101
  • 2
Loading
Source Link
MelB
  • 101
  • 2
Loading