ckb-next/harden_ckb-next-daemon.service.patch
Luigi Baldoni c3b6cf7d3d - Update to version 0.6.1
Support for new devices:
  * K100 RGB Optical-Mechanical
  * K70 Core TKL RGB
  * K65 Mini
  Features:
  * Port to Qt6
  Bug fixes:
  * The GUI no longer crashes on device disconnect
  * The slash key on the Brazilian (ABNT) layout now works with
    modern keyboards
  * Prevent possible USB connection issues on legacy devices
  * Resolve a crash on pure XWayland systems
  * Prevent memory leak on active window detection code
- Switch build to Qt6 on Tumbleweed

OBS-URL: https://build.opensuse.org/package/show/hardware/ckb-next?expand=0&rev=33
2025-03-10 11:43:34 +00:00

25 lines
844 B
Diff

Index: ckb-next-0.4.4/linux/systemd/ckb-next-daemon.service.in
===================================================================
--- ckb-next-0.4.4.orig/linux/systemd/ckb-next-daemon.service.in
+++ ckb-next-0.4.4/linux/systemd/ckb-next-daemon.service.in
@@ -5,6 +5,19 @@
Description=Corsair Keyboards and Mice Daemon
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+# Fixes https://github.com/ckb-next/ckb-next/issues/740
+DeviceAllow=char-usb_device rw
+DeviceAllow=/dev/uinput rw
+ProtectKernelTunables=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
ExecStart=@CMAKE_INSTALL_LIBEXECDIR@/ckb-next-daemon
Restart=on-failure