- Drop harden_accounts-daemon.service.patch: Seems to conflict with
SELinux since version 22.04.62. OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/accountsservice?expand=0&rev=77
This commit is contained in:
@@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 28 07:32:37 UTC 2022 - Dominique Leuenberger <dleuenberger@suse.com>
|
||||
|
||||
- Drop harden_accounts-daemon.service.patch: Seems to conflict with
|
||||
SELinux since version 22.04.62.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Feb 11 23:35:22 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
|
||||
|
||||
|
@@ -28,8 +28,6 @@ Source0: https://www.freedesktop.org/software/accountsservice/%{name}-%{v
|
||||
# WARNING: do not remove/significantly change patch0 without updating the relevant patch in gdm too
|
||||
# PATCH-FIX-OPENSUSE accountsservice-sysconfig.patch bnc#688071 vuntz@opensuse.org -- Read/write autologin configuration from sysconfig, like gdm (see gdm-sysconfig-settings.patch)
|
||||
Patch1: accountsservice-sysconfig.patch
|
||||
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jsegitz@suse.com -- For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
Patch2: harden_accounts-daemon.service.patch
|
||||
|
||||
## SLE and Leap only patches start at 1000
|
||||
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch fate#318433 cxiong@suse.com -- prevent multiple simultaneous login.
|
||||
@@ -97,7 +95,6 @@ querying and manipulating user account information.
|
||||
%prep
|
||||
%setup -q
|
||||
%patch1 -p1
|
||||
%patch2 -p1
|
||||
|
||||
# SLE and Leap patches start at 1000
|
||||
%if 0%{?sle_version}
|
||||
|
@@ -1,20 +0,0 @@
|
||||
Index: accountsservice-22.04.62/data/accounts-daemon.service.in
|
||||
===================================================================
|
||||
--- accountsservice-22.04.62.orig/data/accounts-daemon.service.in
|
||||
+++ accountsservice-22.04.62/data/accounts-daemon.service.in
|
||||
@@ -8,6 +8,15 @@ After=nss-user-lookup.target
|
||||
Wants=nss-user-lookup.target
|
||||
|
||||
[Service]
|
||||
+# added automatically, for details please see
|
||||
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
+PrivateDevices=true
|
||||
+ProtectHostname=true
|
||||
+ProtectClock=true
|
||||
+ProtectKernelTunables=true
|
||||
+ProtectKernelModules=true
|
||||
+ProtectKernelLogs=true
|
||||
+ProtectControlGroups=true
|
||||
Type=dbus
|
||||
BusName=org.freedesktop.Accounts
|
||||
ExecStart=@libexecdir@/accounts-daemon
|
Reference in New Issue
Block a user