third_party/chrony: support dropping privileges
Enables the configuration flags to build with privdrop and
capabilities support and adds the libcap dependency.
This makes chrony capable of running without root privileges.
Change-Id: Ia80dcde80cc7a72c47a1fd30ab4dfb21c902f737
Reviewed-on: https://review.monogon.dev/c/monogon/+/318
Reviewed-by: Sergiusz Bazanski <serge@monogon.tech>
diff --git a/third_party/chrony/config.h.in b/third_party/chrony/config.h.in
index 5be1b28..09694b3 100644
--- a/third_party/chrony/config.h.in
+++ b/third_party/chrony/config.h.in
@@ -8,6 +8,8 @@
#define FEAT_RTC
#define FEAT_SCFILTER
#define FEAT_ASYNCDNS
+#define FEAT_PRIVDROP
+#define CAP_IS_SUPPORTED
#define DEFAULT_COMMAND_SOCKET "/todo/chronyd.sock"
#define DEFAULT_CONF_FILE "/todo/chrony.conf"