From bfa1db2d6adb734bcf85eca72c55301f7e21fa1f Mon Sep 17 00:00:00 2001
From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Wed, 4 Apr 2018 12:40:42 +0200
Subject: [PATCH] enable keyfile by default again

---
 chrony.spec | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/chrony.spec b/chrony.spec
index e718062..5572fe7 100644
--- a/chrony.spec
+++ b/chrony.spec
@@ -68,10 +68,13 @@ EOF
 # don't allow packaging without vendor zone
 test -n "%{vendorzone}"
 
-# use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
-# and get TAI-UTC offset and leap seconds from tzdata by default
+# use example chrony.conf as the default config with some modifications:
+# - use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
+# - enable leapsectz to get TAI-UTC offset and leap seconds from tzdata
+# - enable keyfile
 sed -e 's|^\(pool \)\(pool.ntp.org\)|\12.%{vendorzone}\2|' \
     -e 's|#\(leapsectz\)|\1|' \
+    -e 's|#\(keyfile\)|\1|' \
         < examples/chrony.conf.example2 > chrony.conf
 
 touch -r examples/chrony.conf.example2 chrony.conf