12
0

- Drop harden_accounts-daemon.service.patch: Seems to conflict with

SELinux since version 22.04.62.

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/accountsservice?expand=0&rev=77
This commit is contained in:
2022-03-28 07:33:03 +00:00
committed by Git OBS Bridge
parent 9ee3929f8c
commit 941313908e
3 changed files with 6 additions and 23 deletions

View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon Mar 28 07:32:37 UTC 2022 - Dominique Leuenberger <dleuenberger@suse.com>
- Drop harden_accounts-daemon.service.patch: Seems to conflict with
SELinux since version 22.04.62.
-------------------------------------------------------------------
Fri Feb 11 23:35:22 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>

View File

@@ -28,8 +28,6 @@ Source0: https://www.freedesktop.org/software/accountsservice/%{name}-%{v
# WARNING: do not remove/significantly change patch0 without updating the relevant patch in gdm too
# PATCH-FIX-OPENSUSE accountsservice-sysconfig.patch bnc#688071 vuntz@opensuse.org -- Read/write autologin configuration from sysconfig, like gdm (see gdm-sysconfig-settings.patch)
Patch1: accountsservice-sysconfig.patch
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jsegitz@suse.com -- For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Patch2: harden_accounts-daemon.service.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch fate#318433 cxiong@suse.com -- prevent multiple simultaneous login.
@@ -97,7 +95,6 @@ querying and manipulating user account information.
%prep
%setup -q
%patch1 -p1
%patch2 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}

View File

@@ -1,20 +0,0 @@
Index: accountsservice-22.04.62/data/accounts-daemon.service.in
===================================================================
--- accountsservice-22.04.62.orig/data/accounts-daemon.service.in
+++ accountsservice-22.04.62/data/accounts-daemon.service.in
@@ -8,6 +8,15 @@ After=nss-user-lookup.target
Wants=nss-user-lookup.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
Type=dbus
BusName=org.freedesktop.Accounts
ExecStart=@libexecdir@/accounts-daemon