pool/accountsservice
SHA256
9
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Update harden_accounts-daemon.service.patch: Do not proect home

Browse Source 
directories: the accounts daemon is used to create home
  directories upon user creation (boo#1189853).

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/accountsservice?expand=0&rev=148
This commit is contained in:
Dominique Leuenberger
2021-08-26 15:08:30 +00:00
committed by Git OBS Bridge
parent b7bd8903f1
commit 720c5499cd
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
accountsservice.changes
View File

@@ -1,3 +1,10 @@
-------------------------------------------------------------------
Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
- Update harden_accounts-daemon.service.patch: Do not proect home
directories: the accounts daemon is used to create home
directories upon user creation (boo#1189853).
-------------------------------------------------------------------
Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang <yfjiang@suse.com>

3
harden_accounts-daemon.service.patch
View File

@@ -2,13 +2,12 @@ Index: accountsservice-0.6.55/data/accounts-daemon.service.in
===================================================================
--- accountsservice-0.6.55.orig/data/accounts-daemon.service.in
+++ accountsservice-0.6.55/data/accounts-daemon.service.in
@@ -8,6 +8,16 @@ After=nss-user-lookup.target
@@ -8,6 +8,15 @@ After=nss-user-lookup.target
Wants=nss-user-lookup.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true