From 720c5499cd10232607e92e52e66ab473a8c66fb5a9111fbc0a324d55174f3828 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Thu, 26 Aug 2021 15:08:30 +0000 Subject: [PATCH] - Update harden_accounts-daemon.service.patch: Do not proect home directories: the accounts daemon is used to create home directories upon user creation (boo#1189853). OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/accountsservice?expand=0&rev=148 --- accountsservice.changes | 7 +++++++ harden_accounts-daemon.service.patch | 3 +-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/accountsservice.changes b/accountsservice.changes index 4b6ccea..502a59a 100644 --- a/accountsservice.changes +++ b/accountsservice.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger + +- Update harden_accounts-daemon.service.patch: Do not proect home + directories: the accounts daemon is used to create home + directories upon user creation (boo#1189853). + ------------------------------------------------------------------- Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang diff --git a/harden_accounts-daemon.service.patch b/harden_accounts-daemon.service.patch index ee5a67e..775051b 100644 --- a/harden_accounts-daemon.service.patch +++ b/harden_accounts-daemon.service.patch @@ -2,13 +2,12 @@ Index: accountsservice-0.6.55/data/accounts-daemon.service.in =================================================================== --- accountsservice-0.6.55.orig/data/accounts-daemon.service.in +++ accountsservice-0.6.55/data/accounts-daemon.service.in -@@ -8,6 +8,16 @@ After=nss-user-lookup.target +@@ -8,6 +8,15 @@ After=nss-user-lookup.target Wants=nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -+ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true