pool/at
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 933299 from Base:System

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/933299
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/at?expand=0&rev=81
This commit is contained in:
Dominique Leuenberger 2021-11-26 23:50:33 +00:00 committed by Git OBS Bridge
commit ef6de0e7f6
3 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
at.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Tue Nov 23 12:32:11 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
breaking at jobs (boo#1192294)
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Nov 18 11:23:33 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com> Thu Nov 18 11:23:33 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>

2
atd.service
View File

@ -5,8 +5,6 @@ After=nss-user-lookup.target time-sync.target
[Service] [Service]
# added automatically, for details please see # added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true PrivateDevices=true
ProtectHostname=true ProtectHostname=true
ProtectClock=true ProtectClock=true

4
harden_atd.service.patch
View File

@ -2,14 +2,12 @@ Index: at-3.2.2/atd.service.in
=================================================================== ===================================================================
--- at-3.2.2.orig/atd.service.in --- at-3.2.2.orig/atd.service.in
+++ at-3.2.2/atd.service.in +++ at-3.2.2/atd.service.in
@@ -4,6 +4,19 @@ Documentation=man:atd(8) @@ -4,6 +4,17 @@ Documentation=man:atd(8)
After=remote-fs.target nss-user-lookup.target After=remote-fs.target nss-user-lookup.target
[Service] [Service]
+# added automatically, for details please see +# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true +PrivateDevices=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true +ProtectClock=true