diff --git a/at.changes b/at.changes index 15d4ca6..007d0b5 100644 --- a/at.changes +++ b/at.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Nov 23 12:32:11 UTC 2021 - Johannes Segitz + +- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're + breaking at jobs (boo#1192294) + ------------------------------------------------------------------- Thu Nov 18 11:23:33 UTC 2021 - Danilo Spinella diff --git a/atd.service b/atd.service index 980f7a1..ec8940d 100644 --- a/atd.service +++ b/atd.service @@ -5,8 +5,6 @@ After=nss-user-lookup.target time-sync.target [Service] # added automatically, for details please see # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -ProtectSystem=full -ProtectHome=true PrivateDevices=true ProtectHostname=true ProtectClock=true diff --git a/harden_atd.service.patch b/harden_atd.service.patch index daaf432..1610889 100644 --- a/harden_atd.service.patch +++ b/harden_atd.service.patch @@ -2,14 +2,12 @@ Index: at-3.2.2/atd.service.in =================================================================== --- at-3.2.2.orig/atd.service.in +++ at-3.2.2/atd.service.in -@@ -4,6 +4,19 @@ Documentation=man:atd(8) +@@ -4,6 +4,17 @@ Documentation=man:atd(8) After=remote-fs.target nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -+ProtectSystem=full -+ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true