# The “chrony.keys” file must not be world readable as it could contain
# symmetric keys used for NTP authentication.
chrony: non-standard-file-perm usr/share/chrony/chrony.keys 0640 != 0644

# NetworkManager does not execute dispatcher scripts in /usr/libexec.
chrony: executable-in-usr-lib usr/lib/NetworkManager/dispatcher.d/20-chrony-dhcp
chrony: executable-in-usr-lib usr/lib/NetworkManager/dispatcher.d/20-chrony-onoffline
