From df6f7fba409f75160522935aeacf925d3114890d6e93e95e1e6de8c75d54be30 Mon Sep 17 00:00:00 2001 From: Johannes Weberhofer Date: Fri, 15 Oct 2021 14:04:20 +0000 Subject: [PATCH] Accepting request 925450 from home:jsegitz:branches:systemdhardening_protectclock - Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925450 OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=20 --- coturn.changes | 5 +++++ harden_coturn.service.patch | 3 +-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/coturn.changes b/coturn.changes index 3fa5c12..5ccc659 100644 --- a/coturn.changes +++ b/coturn.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:11:35 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Mon Aug 30 11:55:53 UTC 2021 - Johannes Segitz diff --git a/harden_coturn.service.patch b/harden_coturn.service.patch index 197473b..ec07154 100644 --- a/harden_coturn.service.patch +++ b/harden_coturn.service.patch @@ -2,7 +2,7 @@ Index: coturn-4.5.2/examples/etc/coturn.service =================================================================== --- coturn-4.5.2.orig/examples/etc/coturn.service +++ coturn-4.5.2/examples/etc/coturn.service -@@ -15,6 +15,18 @@ ExecStart=/usr/bin/turnserver -c /etc/tu +@@ -15,6 +15,17 @@ ExecStart=/usr/bin/turnserver -c /etc/tu Restart=on-failure InaccessibleDirectories=/home PrivateTmp=yes @@ -11,7 +11,6 @@ Index: coturn-4.5.2/examples/etc/coturn.service +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true