Accepting request 908804 from home:jsegitz:branches:systemdhardening:utilities
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/908804 OBS-URL: https://build.opensuse.org/package/show/utilities/actkbd?expand=0&rev=10
This commit is contained in:
parent
df0eb289d5
commit
d7cbe14fa9
@ -1,3 +1,9 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jul 27 14:21:13 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
||||||
|
|
||||||
|
- Added hardening to systemd service(s). Modified:
|
||||||
|
* actkbd.service
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Sun Mar 17 13:24:28 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
Sun Mar 17 13:24:28 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
@ -2,6 +2,16 @@
|
|||||||
Description=Actkbd: Daemon for X-independent shortcuts
|
Description=Actkbd: Daemon for X-independent shortcuts
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
|
# added automatically, for details please see
|
||||||
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||||
|
ProtectSystem=full
|
||||||
|
ProtectHome=true
|
||||||
|
ProtectHostname=true
|
||||||
|
ProtectClock=true
|
||||||
|
ProtectKernelTunables=true
|
||||||
|
ProtectKernelModules=true
|
||||||
|
ProtectKernelLogs=true
|
||||||
|
ProtectControlGroups=true
|
||||||
EnvironmentFile=-/etc/sysconfig/actkbd
|
EnvironmentFile=-/etc/sysconfig/actkbd
|
||||||
ExecStart=/usr/sbin/actkbd -q -x -l -d ${ACTKBD_DEVICE} -c ${ACTKBD_CONFIG}
|
ExecStart=/usr/sbin/actkbd -q -x -l -d ${ACTKBD_DEVICE} -c ${ACTKBD_CONFIG}
|
||||||
|
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
#
|
#
|
||||||
# spec file for package actkbd
|
# spec file for package actkbd
|
||||||
#
|
#
|
||||||
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
|
# Copyright (c) 2021 SUSE LLC
|
||||||
#
|
#
|
||||||
# All modifications and additions to the file contributed by third parties
|
# All modifications and additions to the file contributed by third parties
|
||||||
# remain the property of their copyright owners, unless otherwise agreed
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
@ -27,7 +27,7 @@ Release: 0
|
|||||||
Summary: A keyboard shortcut daemon
|
Summary: A keyboard shortcut daemon
|
||||||
License: GPL-2.0-only
|
License: GPL-2.0-only
|
||||||
Group: System/Console
|
Group: System/Console
|
||||||
Url: http://users.softlab.ece.ntua.gr/~thkala/projects/actkbd/
|
URL: http://users.softlab.ece.ntua.gr/~thkala/projects/actkbd/
|
||||||
Source0: http://users.softlab.ece.ntua.gr/~thkala/projects/actkbd/files/actkbd-%{version}.tar.bz2
|
Source0: http://users.softlab.ece.ntua.gr/~thkala/projects/actkbd/files/actkbd-%{version}.tar.bz2
|
||||||
Source1: actkbd.service
|
Source1: actkbd.service
|
||||||
Source2: actkbd.conf
|
Source2: actkbd.conf
|
||||||
|
Loading…
Reference in New Issue
Block a user