Matt Selsky authored Nov 27, 2017 and Matt Selsky committed Nov 28, 2017

This ensures that we byte-compile the python scripts (as well as the python
libraries so that we catch syntax errors during the build, instead of at
run-time.

Fixes Gitlab issue #413

Richard Laager authored Nov 26, 2017 and Eric S. Raymond committed Nov 30, 2017

It is important to specify -g on the command line to allow NTP to
correct the clock on boot.  However, if Restart=yes is set, a malicious
(or broken) server could send the incorrect time, trip the panic
threshold, and when ntpd restarts, serve it the incorrect time (which
would be accepted).

See page 16 here:
http://events.linuxfoundation.org/sites/events/files/slides/vangundy-ntp-security.pdf

This can probably be done by a MITM attacker too, making this
essentially the same as CVE-2015-5300.

Not sure what broke this, something somewhat recent, and not on
all Python 2 hosts.

string.rstrip() and string.replace() do very different things.