#!/bin/sh
exec 2>&1
[ -r conf ] && . ./conf
[ ! -d /run/ntpd-rs ] && mkdir /run/ntpd-rs && chown _ntpd_rs:_ntpd_rs /run/ntpd-rs

exec setpriv --reuid _ntpd_rs --regid _ntpd_rs --clear-groups \
	--ambient-caps -all,+sys_time,+net_bind_service \
	--inh-caps -all,+sys_time,+net_bind_service \
	--bounding-set -all,+sys_time,+net_bind_service \
	--no-new-privs -- ntp-daemon
