pool/accountsservice
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 914414 from GNOME:Factory

Browse Source 
- Update harden_accounts-daemon.service.patch: Do not proect home
  directories: the accounts daemon is used to create home
  directories upon user creation (boo#1189853).

OBS-URL: https://build.opensuse.org/request/show/914414
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/accountsservice?expand=0&rev=73
This commit is contained in:
Dominique Leuenberger 2021-08-26 21:14:35 +00:00 committed by Git OBS Bridge
commit 14faada335
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
accountsservice.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
- Update harden_accounts-daemon.service.patch: Do not proect home
directories: the accounts daemon is used to create home
directories upon user creation (boo#1189853).
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang <yfjiang@suse.com> Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang <yfjiang@suse.com>

3
harden_accounts-daemon.service.patch
View File

@ -2,13 +2,12 @@ Index: accountsservice-0.6.55/data/accounts-daemon.service.in
=================================================================== ===================================================================
--- accountsservice-0.6.55.orig/data/accounts-daemon.service.in --- accountsservice-0.6.55.orig/data/accounts-daemon.service.in
+++ accountsservice-0.6.55/data/accounts-daemon.service.in +++ accountsservice-0.6.55/data/accounts-daemon.service.in
@@ -8,6 +8,16 @@ After=nss-user-lookup.target @@ -8,6 +8,15 @@ After=nss-user-lookup.target
Wants=nss-user-lookup.target Wants=nss-user-lookup.target
[Service] [Service]
+# added automatically, for details please see +# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHome=true
+PrivateDevices=true +PrivateDevices=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true +ProtectClock=true