fix(check): read NTP sources only from files chrony is told to read

Check 6 globbed /etc/chrony.d unconditionally. A drop-in is inert unless chrony.conf names its directory, and Arch's stock chrony.conf names none, so a machine with the IP-addressed source on disk and no confdir line would show the literal and pass. That is a false pass on exactly the misconfiguration the check exists to catch, and it describes a file chrony never opens.

Sources now come only from chrony.conf plus whatever confdir or sourcedir it actually names. The config path is a seam so the confdir logic can be tested against a fixture instead of the real /etc.

This should have been in the previous commit, whose message already describes it. I staged before reviewing, fixed the finding, then committed the stale index.

0 files changed, 0 insertions, 0 deletions