diff --git a/accountsservice.changes b/accountsservice.changes index 4b6ccea..502a59a 100644 --- a/accountsservice.changes +++ b/accountsservice.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger + +- Update harden_accounts-daemon.service.patch: Do not proect home + directories: the accounts daemon is used to create home + directories upon user creation (boo#1189853). + ------------------------------------------------------------------- Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang diff --git a/harden_accounts-daemon.service.patch b/harden_accounts-daemon.service.patch index ee5a67e..775051b 100644 --- a/harden_accounts-daemon.service.patch +++ b/harden_accounts-daemon.service.patch @@ -2,13 +2,12 @@ Index: accountsservice-0.6.55/data/accounts-daemon.service.in =================================================================== --- accountsservice-0.6.55.orig/data/accounts-daemon.service.in +++ accountsservice-0.6.55/data/accounts-daemon.service.in -@@ -8,6 +8,16 @@ After=nss-user-lookup.target +@@ -8,6 +8,15 @@ After=nss-user-lookup.target Wants=nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -+ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true